Introduction
You can provision and manage users in Dart with the System for Cross-domain Identity Management (SCIM).
When configured, changes in your Identity Provider (IdP) will be reflected in Dart. These changes include changing user's names and also creating or deleting users to grant or revoke access to Dart.
Dart works with Microsoft Entra, Okta, and any other IdP that supports SCIM 2.0.
Prerequisites
You must be on the business tier
Your IdP must support SCIM 2.0
You must be a workspace admin
General setup
Visit the Identity settings page in Dart to get started
Copy the 'SCIM URL' to put into your IdP
Copy your 'Authentication token' to put into your IdP
Note that in the future, if you rotate your token or if your account is removed or deactivated, the SCIM integration will need to be reconfigured with a new, valid Authentication token.
IdP-specific setup
Microsoft Entra
Open Microsoft Entra and navigate to the 'Enterprise applications' list
If you don't already have an application for Dart,
Click 'New application' and then click 'Create your own application'
Name it 'Dart', click 'Create', and wait for the application to be created
Within the Dart application, click 'Provisioning', and when that loads, click the new tab that now says 'Provisioning'
Change the 'Provisioning Mode' to 'Automatic'
Paste the 'SCIM URL' from Dart into the 'Tenant URL' field
Paste the 'Authentication token' from Dart into the 'Secret Token' field
Click 'Test Connection'
Click the 'Save' button at the top
Okta
If you don't already have an application for Dart, create a SAML application in Okta for Dart according to the instructions here
Open the new Dart application and then open the 'General' tab
Click 'Edit' in the 'App Settings' section
Ensure that 'Enable SCIM provisioning' is selected
Click 'Save'
Open the 'Provisioning' tab at the top and then ensure the 'Integration' tab is open on the left
Click 'Edit' in the 'SCIM Connection' section
Paste the 'SCIM URL' from Dart into the 'SCIM connector base URL' field
Type 'email' in the 'Unique identifier field for users' field
Ensure 'Push New Users' and 'Push Profile Updates' are selected but nothing else is
Choose 'HTTP Header' in the 'Authentication Mode' field
Paste the 'Authentication token' from Dart into the 'Authorization' field
Click 'Test Connector Configuration'
Click 'Save'
Ensure the 'To App' tab is open on the left
Click 'Edit' in the 'Provisioning to App' section
Ensure 'Create Users', 'Update User Attributes', and 'Deactivate Users' are selected but nothing else is
Click 'Save'