> ## Documentation Index
> Fetch the complete documentation index at: https://bruno-a6972042-mintlify-453ca997.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta SCIM provisioning with Bruno

This guide will walk you through setting up SCIM (System for Cross-domain Identity Management) provisioning with Bruno using Okta SWA (Secure Web Authentication).

<Info>
  **Prerequisites**: Before configuring Okta, you must first enable SCIM provisioning in Bruno and generate an API key. Follow the [Enabling SCIM Provisioning](./overview#enabling-scim-provisioning) section in the overview page to complete this setup and save your API key for use in the steps below.
</Info>

## Create your Okta App

<Info>
  **Already have an Okta App for SSO?** If you previously set up a Bruno Okta application for [SAML SSO](../saml-sso/configure-saml-sso-with-okta), you can reuse it for SCIM provisioning. Skip to the [Configure your Okta App](#configure-your-okta-app) section to add provisioning to your existing application.
</Info>

1. As an Okta admin, navigate to **Applications** and click **Create App Integration**

<img src="https://mintcdn.com/bruno-a6972042-mintlify-453ca997/T77XRhQY6u81btzL/v2/images/screenshots/sso-scim-management/okta/okta-swa-1.webp?fit=max&auto=format&n=T77XRhQY6u81btzL&q=85&s=73c1dd2fc90fb4724ab29a874f48f384" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="2088" height="1180" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-1.webp" />

2. Select **SWA - Secure Web Authentication** and click **Next**

<img src="https://mintcdn.com/bruno-a6972042-mintlify-453ca997/T77XRhQY6u81btzL/v2/images/screenshots/sso-scim-management/okta/okta-swa-2.webp?fit=max&auto=format&n=T77XRhQY6u81btzL&q=85&s=73ddf1bfc27560a09f31478e5e457d1e" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1868" height="1066" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-2.webp" />

3. On the **Create SWA Integration** page, add the following values and click **Finish**:
   * **App name**: (Unique App Name - e.g. Bruno SCIM Integration)
   * **App's login page URL**: `https://license.usebruno.com/`

<img src="https://mintcdn.com/bruno-a6972042-mintlify-453ca997/T77XRhQY6u81btzL/v2/images/screenshots/sso-scim-management/okta/okta-swa-3.webp?fit=max&auto=format&n=T77XRhQY6u81btzL&q=85&s=8058ac575e6f1d563e2b91b9bd66f920" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1538" height="1218" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-3.webp" />

## Configure your Okta App

1. On your newly created application page, select the **General** tab
2. Under **App Settings**, select **Edit**, and check the **Provisioning** option **SCIM** and click **Save**

<img src="https://mintcdn.com/bruno-a6972042-mintlify-453ca997/T77XRhQY6u81btzL/v2/images/screenshots/sso-scim-management/okta/okta-swa-5.webp?fit=max&auto=format&n=T77XRhQY6u81btzL&q=85&s=31dfa3f3b212a7e44ced08c2f00a46d1" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1498" height="1630" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-5.webp" />

3. Return to your Okta app, select the **Provisioning** tab, under **SCIM Connection** select **Edit** and configure the following values:
   * **SCIM connector base URL**: `https://license.usebruno.com/scim/v2`
   * **Unique identifier field for users**: `email`
   * **Supported provisioning actions**: Check the following options:
     * `Import New Users and Profile Updates`
     * `Push New Users`
     * `Push Profile Updates`
     * `Push Groups`
   * **Authentication**: set to **HTTP Header**
   * Under **HTTP Header**, for **token**: add the generated API Key value from the [prerequisites step](./overview#enabling-scim-provisioning)

<img src="https://mintcdn.com/bruno-a6972042-mintlify-453ca997/2Asudiv1eMBk-9HD/v2/images/screenshots/sso-scim-management/okta/okta-swa-7.webp?fit=max&auto=format&n=2Asudiv1eMBk-9HD&q=85&s=cbc80477177a5ef262ceb931c59c7942" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1970" height="1542" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-7.webp" />

4. Click **Test Connector Configuration**. If successful, a **Connector configured successfully** message dialogue appears.

<img src="https://mintcdn.com/bruno-a6972042-mintlify-453ca997/2Asudiv1eMBk-9HD/v2/images/screenshots/sso-scim-management/okta/okta-swa-8.webp?fit=max&auto=format&n=2Asudiv1eMBk-9HD&q=85&s=4e88aca1b1964eed6e15b651102d23fd" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1972" height="1398" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-8.webp" />

5. Click **Save** to complete the Provisioning integration.

6. Under the **Provisioning** tab, select the **To Apps** setting, edit and enable the following options and click **Save**:
   * `Create Users`
   * `Update User Attributes`
   * `Deactivate Users`

<img src="https://mintcdn.com/bruno-a6972042-mintlify-453ca997/2Asudiv1eMBk-9HD/v2/images/screenshots/sso-scim-management/okta/okta-swa-9.webp?fit=max&auto=format&n=2Asudiv1eMBk-9HD&q=85&s=a2a97c4ae6f97eb1e6f6ef32684cb84e" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1860" height="1620" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-9.webp" />

Your SCIM integration is now complete. You can now begin [assigning users to Bruno](#assign-people-and-groups-to-bruno-in-okta).

## Assign people and groups to Bruno in Okta

1. Under your created Bruno Application, navigate to the **Assignments** tab

2. Select **Assign** and either **Assign to People** or **Assign to Groups** to provision Bruno license keys

<img src="https://mintcdn.com/bruno-a6972042-mintlify-453ca997/T77XRhQY6u81btzL/v2/images/screenshots/sso-scim-management/okta/okta-swa-15.webp?fit=max&auto=format&n=T77XRhQY6u81btzL&q=85&s=35a837b78fabfbf481cf0a44492cdff9" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1370" height="708" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-15.webp" />

<img src="https://mintcdn.com/bruno-a6972042-mintlify-453ca997/T77XRhQY6u81btzL/v2/images/screenshots/sso-scim-management/okta/okta-swa-16.webp?fit=max&auto=format&n=T77XRhQY6u81btzL&q=85&s=b79be1a5a271b20525e1340c79b4a4ff" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1258" height="614" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-16.webp" />

3. Assigned Users will receive an email with their **License Key**

<img src="https://mintcdn.com/bruno-a6972042-mintlify-453ca997/T77XRhQY6u81btzL/v2/images/screenshots/sso-scim-management/okta/okta-swa-12.webp?fit=max&auto=format&n=T77XRhQY6u81btzL&q=85&s=0aa069b5fd1cfe3d59d07e6a754c0027" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1812" height="976" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-12.webp" />

## Deprovision users from Bruno in Okta

1. Under your created Bruno Application, navigate to the **Assignments** tab

<img src="https://mintcdn.com/bruno-a6972042-mintlify-453ca997/T77XRhQY6u81btzL/v2/images/screenshots/sso-scim-management/okta/okta-swa-13.webp?fit=max&auto=format&n=T77XRhQY6u81btzL&q=85&s=f334e31d81e85e0352f9dabe6026c8fe" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1360" height="1050" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-13.webp" />

2. Remove the desired users or groups, their license key(s) will be deactivated and they will receive an email notification

<img src="https://mintcdn.com/bruno-a6972042-mintlify-453ca997/T77XRhQY6u81btzL/v2/images/screenshots/sso-scim-management/okta/okta-swa-14.webp?fit=max&auto=format&n=T77XRhQY6u81btzL&q=85&s=04d1f5ea1561f03431a98a05eb0c0926" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="897" height="461" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-14.webp" />

## Related Resources

For more information about configuring SCIM provisioning with Okta, refer to these Okta documentation resources:

* [Add SCIM provisioning to app integrations](https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_scim.htm) - Step-by-step guide for adding SCIM provisioning to Okta applications
* [SCIM 2.0 protocol overview](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-provision-scim-messages.htm) - Reference for SCIM 2.0 messages and provisioning operations
* [On-premises provisioning with SCIM](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-architecture.htm) - Architecture and setup for SCIM provisioning
* [Test SCIM connectors](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-test-scim-server.htm) - Guide for testing SCIM connectors and servers
* [Okta provisioning documentation](https://help.okta.com/en-us/content/topics/provisioning/provisioning.htm) - Comprehensive provisioning documentation and best practices
