--- title: Okta SCIM Integration slug: turbine-user-guide/ksbm-okta-scimsso-application-configuration docTags: createdAt: 2026-02-17T10:27:50.000Z --- Swimlane Turbine supports SCIM 2.0 integration with **Okta**. Use this guide to configure the Okta SCIM 2.0 app, connect it to Swimlane, and provision users and groups. ## Choose Your Path | Goal | Go to | | ----------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Configure the Okta SCIM app | [Provisioning SCIM Application in Okta](https://docs.swimlane.com/ksbm-okta-scimsso-application-configuration#provisioning-scim-application-in-okta) | | Assign users and groups | [Assigning Users](https://docs.swimlane.com/ksbm-okta-scimsso-application-configuration#assigning-users), [Assigning Groups](https://docs.swimlane.com/ksbm-okta-scimsso-application-configuration#assigning-groups), [Pushing Groups](https://docs.swimlane.com/ksbm-okta-scimsso-application-configuration#pushing-groups) | | Field mapping and API details | [Provisioning with SCIM Integration](docId\:uCYk5MLy9Erosd2-nvjpU) | ### Provisioning SCIM Application in Okta 1. Log in to Okta as an administrator. 2. On the left panel, select **Applications** > **Applications**, and click **Browse App Catalog**. ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/9Gm80vwmVLEYoO5s0lFvR_oktaapplications.png" size="86" width="2139" height="1078" darkWidth="800" darkHeight="403" position="center" showCaption="false"} 3. Search for SCIM 2.0 App in the **Search** field. ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/E90q6AMgtkXgZaBE-XrUy_scimsearch.png" size="92" width="2290" height="1528" darkWidth="800" darkHeight="533" position="center" showCaption="false"} 4. Click **Add integration** > **Integrate the app**. 5. Click the **Provisioning** tab and **Configure API Integration**. 6. Enter the following values and click **Save**: | **Field** | **Value** | | --------- | ---------------------------------------------------------------------- | | Base URL | `https:///tenant/api/account//scim/v2` | | API token | Swimlane Personal Access Token (PAT) | :::hint{type="info"} Replace `` with your Swimlane Turbine hostname and `` with your Swimlane account UUID. Okta sends the PAT as the API token; Swimlane maps it for SCIM authentication. Use a PAT for a user with Account Admin privileges. See [Provisioning with SCIM Integration](docId\:uCYk5MLy9Erosd2-nvjpU) for authentication, authorization, and field mapping. ::: 7. Enable provisioning and run **Test API Credentials** to confirm the connection. ### Assigning Users To provision Okta users in Swimlane Turbine, create users in Okta, assign the users to a group, and then assign the provisioning app to the group. Create users in Okta: 1. In Okta, on the left panel, select **Directory** > **People**, and click **Add person**. 2. In the **Add Person** dialog box, enter the user details. 3. Click **Save** or click **Save and Add Another** to add another user. 4. From the Assignments tab, click **Assign**. 5. From the pop-up menu, click **Assign to People**. ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/6q-NxfBvdrwKbEjk_zFv7_scimaddusers.png" size="100" width="2228" height="1264" darkWidth="800" darkHeight="453" position="center" showCaption="false"} Assign any user and verify that the assigned user is added in Swimlane. Swimlane Turbine displays only a subset of Okta user fields. See [Provisioning with SCIM Integration](docId\:uCYk5MLy9Erosd2-nvjpU) on the parent SCIM topic. ### Editing or Removing Users 1. From the Assignments tab, click **Assign**. 2. Click the edit icon next to the user. 3. Update mapped fields (for example, givenName, familyName, display name) and click **Save**. 4. To remove a user assignment, click the delete icon next to the user and click **Save**. Verify that user information is updated in Swimlane. :::hint{type="info"} In Turbine 26.0.0 and later, Okta may call SCIM DELETE to remove users. In earlier versions, de-provision users by setting **active** to false via PUT or PATCH. See [Provisioning with SCIM Integration](docId\:uCYk5MLy9Erosd2-nvjpU). ::: ### Assigning Groups If you do not already have user groups set up in your IdP, create them first. You will assign roles and account access to these groups in Swimlane after they sync. To learn how to create groups, see your IdP documentation. Assigning users is done using two tabs in the app. We recommend selecting users on the **Assignments** tab and associated groups on the **Push Groups** tab. 1. In the app, click the **Assignments** tab. 2. From the Assignments form, click **Assign**. 3. From the pop-up menu, click **Assign to Groups**. 4. From the **Assign to groups** form, click **Assign** for each group you want to assign to the application. 5. Click **Save and go back**. 6. Repeat until all desired groups are assigned to the application. 7. Click **Done**. ### Pushing Groups 1. In the app, click the **Push Groups** tab. 2. From the **Push Groups** form, click **Push Groups**. 3. From the pop-up menu, click **Find groups by name**. ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/6VJJ137B7HQ_35zKkqu1i_scimpushgroups.png" size="96" width="2254" height="1448" darkWidth="800" darkHeight="513" position="center" showCaption="false"} 4. In the search field, enter the first few characters of the group name you want to send to Swimlane. Leave **Push group memberships immediately** checked. 5. Click your group in the search results list. 6. Click **Save**, or **Save and add another** to configure more groups. ::Image[]{src="https://api.archbee.com/api/optimize/511c8QBH-VHiwWnyzIwUb/2yQd17VSY6PfDI8alKjos_scimpushname.png" size="98" width="2139" height="1279" darkWidth="800" darkHeight="478" position="center" showCaption="false"} :::hint{type="info"} Without pushing the group, the group does not sync to Swimlane Turbine. After you push a group, it continues to sync until it is deactivated in Okta. Roles are not provisioned through SCIM; assign roles to synced groups manually in Swimlane. ::: Verify that the group, group members, and user–group associations appear in Swimlane Turbine. ## See Also - [Provisioning with SCIM Integration](docId\:uCYk5MLy9Erosd2-nvjpU) — Prerequisites, PAT authentication, REST endpoints, and field mapping