> ## Documentation Index
> Fetch the complete documentation index at: https://bruno-a6972042-docs-clustered-top-nav-v2.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta SCIM provisioning with Bruno

This guide will walk you through setting up SCIM (System for Cross-domain Identity Management) provisioning with Bruno using Okta SWA (Secure Web Authentication).

<Info>
  **Prerequisites**: Before configuring Okta, you must first enable SCIM provisioning in Bruno and generate an API key. Follow the [Enabling SCIM Provisioning](./overview#enabling-scim-provisioning) section in the overview page to complete this setup and save your API key for use in the steps below.
</Info>

## Create your Okta App

<Info>
  **Already have an Okta App for SSO?** If you previously set up a Bruno Okta application for [SAML SSO](../saml-sso/configure-saml-sso-with-okta), you can reuse it for SCIM provisioning. Skip to the [Configure your Okta App](#configure-your-okta-app) section to add provisioning to your existing application.
</Info>

1. As an Okta admin, navigate to **Applications** and click **Create App Integration**

<img src="https://mintcdn.com/bruno-a6972042-docs-clustered-top-nav-v2/BvuRWm3msuj2Grf1/v2/images/screenshots/sso-scim-management/okta/okta-swa-1.webp?fit=max&auto=format&n=BvuRWm3msuj2Grf1&q=85&s=2834addc4e1c1f71010de7cb62a48d78" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="2088" height="1180" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-1.webp" />

2. Select **SWA - Secure Web Authentication** and click **Next**

<img src="https://mintcdn.com/bruno-a6972042-docs-clustered-top-nav-v2/BvuRWm3msuj2Grf1/v2/images/screenshots/sso-scim-management/okta/okta-swa-2.webp?fit=max&auto=format&n=BvuRWm3msuj2Grf1&q=85&s=19937e6d649bd9716e43da86d2282d3c" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1868" height="1066" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-2.webp" />

3. On the **Create SWA Integration** page, add the following values and click **Finish**:
   * **App name**: (Unique App Name - e.g. Bruno SCIM Integration)
   * **App's login page URL**: `https://license.usebruno.com/`

<img src="https://mintcdn.com/bruno-a6972042-docs-clustered-top-nav-v2/BvuRWm3msuj2Grf1/v2/images/screenshots/sso-scim-management/okta/okta-swa-3.webp?fit=max&auto=format&n=BvuRWm3msuj2Grf1&q=85&s=f9403506f653012b50eafd03ff40c8b1" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1538" height="1218" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-3.webp" />

## Configure your Okta App

1. On your newly created application page, select the **General** tab
2. Under **App Settings**, select **Edit**, and check the **Provisioning** option **SCIM** and click **Save**

<img src="https://mintcdn.com/bruno-a6972042-docs-clustered-top-nav-v2/BvuRWm3msuj2Grf1/v2/images/screenshots/sso-scim-management/okta/okta-swa-5.webp?fit=max&auto=format&n=BvuRWm3msuj2Grf1&q=85&s=5f29bbaab3b20cd31cc978178153dc54" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1498" height="1630" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-5.webp" />

3. Return to your Okta app, select the **Provisioning** tab, under **SCIM Connection** select **Edit** and configure the following values:
   * **SCIM connector base URL**: `https://license.usebruno.com/scim/v2`
   * **Unique identifier field for users**: `email`
   * **Supported provisioning actions**: Check the following options:
     * `Import New Users and Profile Updates`
     * `Push New Users`
     * `Push Profile Updates`
     * `Push Groups`
   * **Authentication**: set to **HTTP Header**
   * Under **HTTP Header**, for **token**: add the generated API Key value from the [prerequisites step](./overview#enabling-scim-provisioning)

<img src="https://mintcdn.com/bruno-a6972042-docs-clustered-top-nav-v2/Jq6-mIJ5ByL6QssV/v2/images/screenshots/sso-scim-management/okta/okta-swa-7.webp?fit=max&auto=format&n=Jq6-mIJ5ByL6QssV&q=85&s=5598180fa2cfcd962d033893f3054389" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1970" height="1542" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-7.webp" />

4. Click **Test Connector Configuration**. If successful, a **Connector configured successfully** message dialogue appears.

<img src="https://mintcdn.com/bruno-a6972042-docs-clustered-top-nav-v2/Jq6-mIJ5ByL6QssV/v2/images/screenshots/sso-scim-management/okta/okta-swa-8.webp?fit=max&auto=format&n=Jq6-mIJ5ByL6QssV&q=85&s=5438d4e77be3413ad7e45195efccca81" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1972" height="1398" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-8.webp" />

5. Click **Save** to complete the Provisioning integration.

6. Under the **Provisioning** tab, select the **To Apps** setting, edit and enable the following options and click **Save**:
   * `Create Users`
   * `Update User Attributes`
   * `Deactivate Users`

<img src="https://mintcdn.com/bruno-a6972042-docs-clustered-top-nav-v2/Jq6-mIJ5ByL6QssV/v2/images/screenshots/sso-scim-management/okta/okta-swa-9.webp?fit=max&auto=format&n=Jq6-mIJ5ByL6QssV&q=85&s=ebf922a1fa8344991b9db3e7fc4cf03a" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1860" height="1620" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-9.webp" />

Your SCIM integration is now complete. You can now begin [assigning users to Bruno](#assign-people-and-groups-to-bruno-in-okta).

## Assign people and groups to Bruno in Okta

1. Under your created Bruno Application, navigate to the **Assignments** tab

2. Select **Assign** and either **Assign to People** or **Assign to Groups** to provision Bruno license keys

<img src="https://mintcdn.com/bruno-a6972042-docs-clustered-top-nav-v2/BvuRWm3msuj2Grf1/v2/images/screenshots/sso-scim-management/okta/okta-swa-15.webp?fit=max&auto=format&n=BvuRWm3msuj2Grf1&q=85&s=66cd2b42fafbd2055800e375d90c37fb" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1370" height="708" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-15.webp" />

<img src="https://mintcdn.com/bruno-a6972042-docs-clustered-top-nav-v2/BvuRWm3msuj2Grf1/v2/images/screenshots/sso-scim-management/okta/okta-swa-16.webp?fit=max&auto=format&n=BvuRWm3msuj2Grf1&q=85&s=b093080e03ab8c6e5b9eaa7a0f87019e" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1258" height="614" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-16.webp" />

3. Assigned Users will receive an email with their **License Key**

<img src="https://mintcdn.com/bruno-a6972042-docs-clustered-top-nav-v2/BvuRWm3msuj2Grf1/v2/images/screenshots/sso-scim-management/okta/okta-swa-12.webp?fit=max&auto=format&n=BvuRWm3msuj2Grf1&q=85&s=3b5fde3f93ecd1900c0128e6ddf6aa8d" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1812" height="976" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-12.webp" />

## Deprovision users from Bruno in Okta

1. Under your created Bruno Application, navigate to the **Assignments** tab

<img src="https://mintcdn.com/bruno-a6972042-docs-clustered-top-nav-v2/BvuRWm3msuj2Grf1/v2/images/screenshots/sso-scim-management/okta/okta-swa-13.webp?fit=max&auto=format&n=BvuRWm3msuj2Grf1&q=85&s=676985728a74e8ba32e502bdffd47e7f" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="1360" height="1050" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-13.webp" />

2. Remove the desired users or groups, their license key(s) will be deactivated and they will receive an email notification

<img src="https://mintcdn.com/bruno-a6972042-docs-clustered-top-nav-v2/BvuRWm3msuj2Grf1/v2/images/screenshots/sso-scim-management/okta/okta-swa-14.webp?fit=max&auto=format&n=BvuRWm3msuj2Grf1&q=85&s=4a774cbced1d1b22b79c26014721011e" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} width="897" height="461" data-path="v2/images/screenshots/sso-scim-management/okta/okta-swa-14.webp" />

## Related Resources

For more information about configuring SCIM provisioning with Okta, refer to these Okta documentation resources:

* [Add SCIM provisioning to app integrations](https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_scim.htm) - Step-by-step guide for adding SCIM provisioning to Okta applications
* [SCIM 2.0 protocol overview](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-provision-scim-messages.htm) - Reference for SCIM 2.0 messages and provisioning operations
* [On-premises provisioning with SCIM](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-architecture.htm) - Architecture and setup for SCIM provisioning
* [Test SCIM connectors](https://help.okta.com/en-us/content/topics/provisioning/opp/opp-test-scim-server.htm) - Guide for testing SCIM connectors and servers
* [Okta provisioning documentation](https://help.okta.com/en-us/content/topics/provisioning/provisioning.htm) - Comprehensive provisioning documentation and best practices
