New SCIM Based User Provisioning

Provision and manage user accounts with the MangoApps SCIM API

  • SCIM Setup for OneLogin

    • Configure user mappings to sync user profile via SAML supports two options
      • SAML based provisioning
      • SAML based provisioning with SCIM
    • SAML based provisioning
      • In this the user provisioning and user profile sync happens when the user logs in successfully in MangoApps for the fist time using SSO with OneLogin
      • On every subsequent successful login, the user profile in MangoApps is also synched with OneLogin
    • SAML based provisioning with SCIM
      • In this the user provisioning and user profile sync happens ahead of time via SCIM APIs integration
      • User profile in MangoApps is kept in sync in real time with OneLogin via SCIM APIs
      • User de-provisioning / de-activation in MangoApps also happens in real time when the user is de-provisioned in OneLogin
      • SCIM base URL & SCIM bearer token generated by MangoApps has been configured in your company’s OneLogin account
      • Enterprise schema with custom field mappings is available to copy from MangoApps to OneLogin
    • All users provisioned via OneLogin¬† over SAML/SCIM will be network users
    • Users can not be permanently deleted from MangoApps via SCIM, they can only be deactivated.
    • When creating a new user, if anything in user profile field values is invalid, all profile fields will be dropped

 

  • SCIM Compliance

    • MangoApps is SCIM 2.0 compliant and supports user provisioning, user updates & user de-provisioning using SCIM protocol
    • The following SCIM APIs are supported by MangoApps
      • Get User With UserName Filter
      • Get User By ID
      • Create User
      • Update User
      • De-Activate/Activate User
      • Get Users
    • SCIM API calls from your OneLogin setup should be rate limited to be a max of 100 requests / per minute for API endpoints

 

  • Connector Logs

    • Connector logs in admin portal capture the requests & responses payloads for SCIM APIs
    • Admins can view & export these connector logs for troubleshooting & analysis