> ## Documentation Index
> Fetch the complete documentation index at: https://bruno-a6972042-navigationexperiment.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta SCIM provisioning with Bruno

This guide will walk you through setting up SCIM (System for Cross-domain Identity Management) provisioning with Bruno using Okta SWA (Secure Web Authentication).

<Info>
  **Prerequisites**: Before configuring Okta, you must first enable SCIM provisioning in Bruno and generate an API key. Follow the [Enabling SCIM Provisioning](./overview#enabling-scim-provisioning) section in the overview page to complete this setup and save your API key for use in the steps below.
</Info>

## Create your Okta App

<Info>
  **Already have an Okta App for SSO?** If you previously set up a Bruno Okta application for [SAML SSO](../saml-sso/configure-saml-sso-with-okta), you can reuse it for SCIM provisioning. Skip to the [Configure your Okta App](#configure-your-okta-app) section to add provisioning to your existing application.
</Info>

1. As an Okta admin, navigate to **Applications** and click **Create App Integration**

<img src="https://mintcdn.com/bruno-a6972042-navigationexperiment/9VB2rmlycgE0vSlQ/v2/images/screenshots/sso-scim-management/okta/okta-swa-1.webp?fit=max&auto=format&n=9VB2rmlycgE0vSlQ&q=85&s=4e4ec249d26eee1964e84eefb886c2f6" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="2088" height="1180" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-1.webp" />

2. Select **SWA - Secure Web Authentication** and click **Next**

<img src="https://mintcdn.com/bruno-a6972042-navigationexperiment/9VB2rmlycgE0vSlQ/v2/images/screenshots/sso-scim-management/okta/okta-swa-2.webp?fit=max&auto=format&n=9VB2rmlycgE0vSlQ&q=85&s=dea9cf56de2d392412a695000cb687b9" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1868" height="1066" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-2.webp" />

3. On the **Create SWA Integration** page, add the following values and click **Finish**:
   * **App name**: (Unique App Name - e.g. Bruno SCIM Integration)
   * **App's login page URL**: `https://license.usebruno.com/`

<img src="https://mintcdn.com/bruno-a6972042-navigationexperiment/9VB2rmlycgE0vSlQ/v2/images/screenshots/sso-scim-management/okta/okta-swa-3.webp?fit=max&auto=format&n=9VB2rmlycgE0vSlQ&q=85&s=031c2feaab1ab7b8920b3201db07463c" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1538" height="1218" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-3.webp" />

## Configure your Okta App

1. On your newly created application page, select the **General** tab
2. Under **App Settings**, select **Edit**, and check the **Provisioning** option **SCIM** and click **Save**

<img src="https://mintcdn.com/bruno-a6972042-navigationexperiment/9VB2rmlycgE0vSlQ/v2/images/screenshots/sso-scim-management/okta/okta-swa-5.webp?fit=max&auto=format&n=9VB2rmlycgE0vSlQ&q=85&s=6efaf53f1509a84c1eb1cf5fb016fc36" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1498" height="1630" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-5.webp" />

3. Return to your Okta app, select the **Provisioning** tab, under **SCIM Connection** select **Edit** and configure the following values:
   * **SCIM connector base URL**: `https://license.usebruno.com/scim/v2`
   * **Unique identifier field for users**: `email`
   * **Supported provisioning actions**: Check the following options:
     * `Import New Users and Profile Updates`
     * `Push New Users`
     * `Push Profile Updates`
     * `Push Groups`
   * **Authentication**: set to **HTTP Header**
   * Under **HTTP Header**, for **token**: add the generated API Key value from the [prerequisites step](./overview#enabling-scim-provisioning)

<img src="https://mintcdn.com/bruno-a6972042-navigationexperiment/9VB2rmlycgE0vSlQ/v2/images/screenshots/sso-scim-management/okta/okta-swa-7.webp?fit=max&auto=format&n=9VB2rmlycgE0vSlQ&q=85&s=184d1428f73166c45a490d04aa9d96c7" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1970" height="1542" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-7.webp" />

4. Click **Test Connector Configuration**. If successful, a **Connector configured successfully** message dialogue appears.

<img src="https://mintcdn.com/bruno-a6972042-navigationexperiment/9VB2rmlycgE0vSlQ/v2/images/screenshots/sso-scim-management/okta/okta-swa-8.webp?fit=max&auto=format&n=9VB2rmlycgE0vSlQ&q=85&s=9c49a454acb6e448bf3671e5863191c4" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1972" height="1398" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-8.webp" />

5. Click **Save** to complete the Provisioning integration.

6. Under the **Provisioning** tab, select the **To Apps** setting, edit and enable the following options and click **Save**:
   * `Create Users`
   * `Update User Attributes`
   * `Deactivate Users`

<img src="https://mintcdn.com/bruno-a6972042-navigationexperiment/9VB2rmlycgE0vSlQ/v2/images/screenshots/sso-scim-management/okta/okta-swa-9.webp?fit=max&auto=format&n=9VB2rmlycgE0vSlQ&q=85&s=e3a8f496325157e2ea7736ffb48e219e" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1860" height="1620" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-9.webp" />

Your SCIM integration is now complete. You can now begin [assigning users to Bruno](#assign-people-and-groups-to-bruno-in-okta).

## Assign people and groups to Bruno in Okta

1. Under your created Bruno Application, navigate to the **Assignments** tab

2. Select **Assign** and either **Assign to People** or **Assign to Groups** to provision Bruno license keys

<img src="https://mintcdn.com/bruno-a6972042-navigationexperiment/9VB2rmlycgE0vSlQ/v2/images/screenshots/sso-scim-management/okta/okta-swa-15.webp?fit=max&auto=format&n=9VB2rmlycgE0vSlQ&q=85&s=e040a72f6414f242d726c1c92b29d47d" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1370" height="708" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-15.webp" />

<img src="https://mintcdn.com/bruno-a6972042-navigationexperiment/9VB2rmlycgE0vSlQ/v2/images/screenshots/sso-scim-management/okta/okta-swa-16.webp?fit=max&auto=format&n=9VB2rmlycgE0vSlQ&q=85&s=2c722c05f084532bbb3f9560f7514985" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1258" height="614" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-16.webp" />

3. Assigned Users will receive an email with their **License Key**

<img src="https://mintcdn.com/bruno-a6972042-navigationexperiment/9VB2rmlycgE0vSlQ/v2/images/screenshots/sso-scim-management/okta/okta-swa-12.webp?fit=max&auto=format&n=9VB2rmlycgE0vSlQ&q=85&s=0aa1778faa54e4284e08c28a0e6426c8" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1812" height="976" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-12.webp" />

## Deprovision users from Bruno in Okta

1. Under your created Bruno Application, navigate to the **Assignments** tab

<img src="https://mintcdn.com/bruno-a6972042-navigationexperiment/9VB2rmlycgE0vSlQ/v2/images/screenshots/sso-scim-management/okta/okta-swa-13.webp?fit=max&auto=format&n=9VB2rmlycgE0vSlQ&q=85&s=09befb6a9876bd1468e5093e71b8bf00" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1360" height="1050" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-13.webp" />

2. Remove the desired users or groups, their license key(s) will be deactivated and they will receive an email notification

<img src="https://mintcdn.com/bruno-a6972042-navigationexperiment/9VB2rmlycgE0vSlQ/v2/images/screenshots/sso-scim-management/okta/okta-swa-14.webp?fit=max&auto=format&n=9VB2rmlycgE0vSlQ&q=85&s=9b2863b0258b24ba965b862890ab8d1c" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="897" height="461" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-14.webp" />

## Related Resources

For more information about configuring SCIM provisioning with Okta, refer to these Okta documentation resources:

* [Add SCIM provisioning to app integrations](https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_scim.htm) - Step-by-step guide for adding SCIM provisioning to Okta applications
* [SCIM 2.0 protocol overview](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-provision-scim-messages.htm) - Reference for SCIM 2.0 messages and provisioning operations
* [On-premises provisioning with SCIM](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-architecture.htm) - Architecture and setup for SCIM provisioning
* [Test SCIM connectors](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-test-scim-server.htm) - Guide for testing SCIM connectors and servers
* [Okta provisioning documentation](https://help.okta.com/en-us/content/topics/provisioning/provisioning.htm) - Comprehensive provisioning documentation and best practices
