Skip to main content

Integration for SCIM User Provisioning

Note

This option pertains to the Hyperproof TPRM product line.

The SCIM integration streamlines user and group provisioning by automatically synchronizing with Azure or Okta. Key features include:

  • Managing SCIM secrets with the ability to add and delete them.

  • Setting default roles for provisioned users.

Note

Use the Disable button at the top of the window to deactivate the integration when needed.

When you select SCIM User Provisioning from the Settings > Integrations page, Hyperproof TPRM displays the following options in the left menu:

  • General - SCIM configuration for Hyperproof TPRM.

  • SCIM Guide - Step-by-step configuration guides for Azure and Okta.

General SCIM configuration for Hyperproof TPRM

Complete the following to set up your SCIM configuration in Hyperproof TPRM.

  • Production mode - Toggles Production Mode on and off.

  • SCIM Endpoint - Automatically generated upon enabling SCIM integration. Click the Copy icon to copy the contents of this field.

  • Default User Role - Allows users to set the default role for provisioned users. Options include: Admin, Manager, User

  • Secrets table - Allows you to see and manage SCIM secrets.

    • Columns include:

      • Secret - Displays the secret. Click the Copy icon to copy the contents of this field.

      • Created Date - Date the secret was created.

      • Action - Contains the delete icon to remove secrets.

    • + Add Secret - Allows users to generate new secrets.

Azure SCIM configuration for Hyperproof TPRM

  1. Create an Azure App

    Skip this step if a SAML app already exists.

    1. Open the Azure Portal.

    2. Click All Services and search for Microsoft Entra ID.

    3. From the left menu, select Enterprise Applications.

    4. Choose Create Your Own Application and do the following:

      • Enter the name - Expent-SCIM.

      • Select Integrate any other application you don't find in the gallery (Non-gallery).

      • Click Create.

  2. Configure SCIM Integration

    1. From the left menu, select Provisioning.

    2. Click Get Started.

    3. Set Provisioning Mode to Automatic.

    4. Under Admin Credentials, complete the following fields:

      • Tenant URL - https://api.expent.ai/user/scim-provisioning/bdd060bf-87bd-433d-a41b-5720deb72931

      • Secret Token - Copy the secret displayed on the SCIM User Provisioning window on the General tab in Hyperproof TPRM and paste it here.

    5. Click Test Connection.

    6. Set Provisioning Status to On.

    7. Click Save.

  3. Assign Users and Groups

    • Navigate to the Microsoft Entra ID page.

    • Select Enterprise Applications.

    • Select the Expent-SCIM application.

    • Navigate to Users and Groups.

    • Use the Add User/Group button to assign individual users or groups to the application.

Okta SCIM configuration for Hyperproof TPRM

  1. Create a SAML App in Okta

    Skip this step if you already have a SAML App for Hyperproof TPRM.

    1. Open the Okta Admin console.

    2. From the left menu, select Applications > Applications.

    3. Click Create App Integration.

    4. In the pop-up window, set the Sign-on Method to SAML 2.0.

    5. Click Next.

  2. Configure SCIM integration

    1. Log in to your Okta admin console.

    2. From the left menu, select Applications > Applications.

    3. Select the SAML app you created for Hyperproof TPRM.

    4. Navigate to the General tab in the SAML App.

    5. Click Edit for App Settings.

    6. Select the checkbox for Enable SCIM provisioning and click Save.

    7. Navigate to the Provisioning tab.

    8. Edit SCIM Connection.

      • In SCIM Connector Base URL, enter:

        https://api.expent.ai/user/scim-provisioning/53f50e0d-8140-4e43-9a47-875990fe1351

      • In Unique Identifier field for users, enter:

        email

    9. Select the following checkboxes:

      • Import New Users and Profile Updates

      • Push New Users

      • Push Profile Updates for Supported provisioning actions

    10. Under Authentication Mode select HTTP Header.

    11. In the Authorization field, paste the secret displayed on the SCIM User Provisioning window on the General tab in Hyperproof TPRM.

    12. Click Test Connector Configuration.

    13. When the Connector Configuration test is successful, click Save.

    14. Navigate to Provisioning > To App.

    15. Click Edit.

    16. Select the checkbox for Create Users.

    17. Click Save for Provisioning to App.

In this section: