Okta SCIM Configuration
Integrate Emburse Cards and Okta to enable automated user provisioning with the System for Cross-domain Identity Management (SCIM) protocol.
To learn more about SCIM and Okta, see What Is SCIM?.
Supported Functionality
This section describes what the Emburse Cards Okta app can do.
The Emburse Cards Okta app enables administrators to automatically create, update, and deactivate Emburse Cards users based on the organization’s Okta directory. The app also supports Single Sign-On (SSO).
Requirements
This section lists what you need before you begin.
You must be an administrator in both Emburse Cards and Okta to complete this configuration.
Configure SCIM In Okta
This section explains how to enable provisioning from Okta to Emburse Cards.
Enable API Integration
Complete these steps to connect Okta to Emburse Cards.
| 1. | In the Okta admin dashboard, open the Emburse Cards application and go to the Provisioning tab. |
| 2. | Select API Integration, then select Configure API Integration. |
| 3. | Select Enable API Integration, then select Authenticate with Emburse Cards. |
| 4. | In the authorization window, select Authorize Application to allow Okta to manage users in your Emburse Cards organization. |
| 5. | Return to Okta and confirm that Emburse Cards was verified successfully, then select Save. |
Enable Provisioning Actions
Complete these steps to turn on the provisioning actions you want Okta to manage.
| 1. | In the Emburse Cards application settings, in the left navigation, select To App. |
| 2. | Select Edit. |
| 3. | Enable the options for Create Users, Update User Attributes, and Deactivate Users. |
| 4. | Select Save. |
Set The Application Username Format
Complete these steps to ensure usernames match email addresses.
| 1. | Open the Sign On tab. |
| 2. | Set Application username format to Email, then select Save. |
Your Okta account is now configured to sync your directory to your Emburse Cards organization.
Sync Okta Users To Emburse Cards
This section explains how to assign people or groups to provision users in Emburse Cards.
Assign Users Or Groups
Complete these steps to provision users from Okta.
| 1. | In Okta, open the Emburse Cards application and select the Assignments tab. |
| 2. | Select Assign. |
| 3. | To provision individual users, select Assign to People. To provision groups, select Assign to Groups. |
| 4. | Select the users or groups to provision, then select Assign. |
| 5. | In the assignment dialog, confirm that User Name and Primary Email match, then select Save and Go Back. |
After you save, Okta immediately creates these users as members in your Emburse Cards organization.
Troubleshooting And Tips
This section covers common issues and how to avoid them.
After an Emburse Cards user is created, you cannot change the username. If you provision a user from Okta and later attempt to change the username, Emburse Cards returns an error.