Skip to main content
SCIM
Updated over 2 months ago

Introduction

You can provision and manage users in Dart with the System for Cross-domain Identity Management (SCIM).

When configured, changes in your Identity Provider (IdP) will be reflected in Dart. These changes include changing user's names and also creating or deleting users to grant or revoke access to Dart.

Dart works with Microsoft Entra, Okta, and any other IdP that supports SCIM 2.0.

Prerequisites

  1. You must be on the business tier

  2. Your IdP must support SCIM 2.0

  3. You must be a workspace admin

General setup

  1. Visit the Identity settings page in Dart to get started

  2. Copy the 'SCIM URL' to put into your IdP

  3. Copy your 'Authentication token' to put into your IdP

Note that in the future, if you rotate your token or if your account is removed or deactivated, the SCIM integration will need to be reconfigured with a new, valid Authentication token.

IdP-specific setup

Microsoft Entra

  1. Open Microsoft Entra and navigate to the 'Enterprise applications' list

  2. If you don't already have an application for Dart,

    1. Click 'New application' and then click 'Create your own application'

    2. Name it 'Dart', click 'Create', and wait for the application to be created

  3. Within the Dart application, click 'Provisioning', and when that loads, click the new tab that now says 'Provisioning'

  4. Change the 'Provisioning Mode' to 'Automatic'

  5. Paste the 'SCIM URL' from Dart into the 'Tenant URL' field

  6. Paste the 'Authentication token' from Dart into the 'Secret Token' field

  7. Click 'Test Connection'

  8. Click the 'Save' button at the top

Okta

  1. If you don't already have an application for Dart, create a SAML application in Okta for Dart according to the instructions here

  2. Open the new Dart application and then open the 'General' tab

  3. Click 'Edit' in the 'App Settings' section

  4. Ensure that 'Enable SCIM provisioning' is selected

  5. Click 'Save'

  6. Open the 'Provisioning' tab at the top and then ensure the 'Integration' tab is open on the left

  7. Click 'Edit' in the 'SCIM Connection' section

  8. Paste the 'SCIM URL' from Dart into the 'SCIM connector base URL' field

  9. Type 'email' in the 'Unique identifier field for users' field

  10. Ensure 'Push New Users' and 'Push Profile Updates' are selected but nothing else is

  11. Choose 'HTTP Header' in the 'Authentication Mode' field

  12. Paste the 'Authentication token' from Dart into the 'Authorization' field

  13. Click 'Test Connector Configuration'

  14. Click 'Save'

  15. Ensure the 'To App' tab is open on the left

  16. Click 'Edit' in the 'Provisioning to App' section

  17. Ensure 'Create Users', 'Update User Attributes', and 'Deactivate Users' are selected but nothing else is

  18. Click 'Save'

Did this answer your question?