Configuring SCIM for OneLogin

Log in to our OneLogin Domain as an Administrator 

Click Applications

Select Add App

Search for SCIM Provisioner with SAML (SCIM v2 Enterprise) and select it

Enter an appropriate name and description for this application.

Under the Configuration tab enter the following values

1. SCIM Base URL: https://platform.api.livingsecurity.com/users/scim/v2/

2. SCIM Bearer Token: Your created API Token

Paste the following under SCIM JSON Template:

1. {
   
     "schemas": [
   
       "urn:ietf:params:scim:schemas:core:2.0:User",
   
       "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
   
     ],
   
     "userName": "{$parameters.scimusername}",
   
     "name": {
   
       "familyName": "{$user.lastname}",
   
       "givenName": "{$user.firstname}"
   
     },
   
     "title": "{$parameters.title}",
   
     "userType": "{$parameters.userType}",
   
     "timezone": "{$parameters.timezone}",
   
     "emails": [
   
       {
   
         "value": "{$user.email}",
   
         "type": "work",
   
         "primary": true
   
       }
   
     ],
   
     "addresses": [
   
       {
   
         "locality": "{$user.city}",
   
         "region": "{$user.state}",
   
         "country": "{$user.country}"
   
       }
   
     ],
   
     "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
   
       "organization": "{$parameters.organization}",
   
       "division": "{$parameters.division}",
   
       "department": "{$parameters.department}",
   
       "manager": {
   
         "value": "{$parameters.external_manager_id}",
   
         "displayName": "{$user.manager_firstname} {$user.manager_lastname}"
   
       }
   
     }
   
   }

Select Parameters

Set SAML NameID (Subject) and SCIM username to Email 

Select Provisioning and Check the box for Enable Provisioning

Click Save

Now Assign Users