Okta SCIM Integration

Features

  • New user creation:
    • New users created through OKTA will also be created in the Spotinst organization.
  • User deletion:
    • Users deactivated through OKTA will be deleted from the Spotinst organization.
  • User recreation:
    •  Previously deactivated users, can be reactivated on OKTA, and will be recreated in the Spotinst organization.
  • Import User
    • Import existing Spotinst users in Okta.

Prerequisites

Step-by-Step Configuration Instructions

App Installation
  1. In the Okta dashboard, click on “Admin”.

  2. Afterward, from the top menu, select “applications”.

  3. Click on “Add application”.
  4. Search for “Spotinst” and select the “Spotinst” object under Integrations.
  5. In the Integration page, click on “Add”.
  6. Click on “Configure API Integration”.
    • Verify that the “Enable API Integration” checkbox is enabled.
    • Insert the API token (configured as part of the prerequisites).
    • Click on “Test API Integration”.
    • After Completion click on “Save”.

  7.  You will find yourself back at the “To App” settings, under the provisioning tab. Click on “Edit”.

  8. Select the checkboxes for “Create Users”, “Update User Attributes” and “Deactivate Users”, then Hit Save.
Import existing users
  1. Browse to the “Import” tab.
  2. Click on “Import now” and then click “Ok”.
  3. Select the users which you would like to assign to Spotinst by selecting the checkbox on the right.
  4. After selecting the users, click on “Confirm Assignments”.
  5. Click on “Confirm”.
  6. Browse to the “Provisioning” tab.
  7. Select “To App” from the left-hand menu.
  8. Click on “Force Sync”.
Add a new user
  1. From the top menu, select “Directory” and then “People”.

  2. Select the user.
  3. Click on “Assign Application”.

  4. Select “Spotinst SCIM” and then click on “Assign”.

  5. In this screen, click on “Save and go back”.

Troubleshooting Tips

  • This integration deals with user creation & deletion, it does not update existing users.

    Note that “Update User Attributes” should still be enabled, as described in step 8 of the App Installation” instructions. This is in order to support  the “Force Sync” step, necessary for importing users.
  • It does not affect existing users in any way.
  • In order to use this integration, the Spotinst organization should have more than 1 user attached to it.