Skip to content

Commit f023c67

Browse files
authored
Merge pull request #2102 from elementary-data/provisioning-docs
Provisioning Docs
2 parents 10f42b1 + d0ad4a3 commit f023c67

2 files changed

Lines changed: 50 additions & 33 deletions

File tree

docs/cloud/integrations/security-and-connectivity/ms-entra.mdx

Lines changed: 15 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -63,11 +63,20 @@ In order to enable SAML using Microsoft Entra ID (Previously Azure AD SSO), we n
6363
## Provisioning
6464

6565
Elementary supports user provisioning via SCIM to automate user management. If you want to enable automatic provisioning, follow these steps:
66-
- In the **Microsoft Entra portal**, go to **Enterprise Applications** and select the newly created SAML application.
67-
- Navigate to **Provisioning** and click **Get Started**.
68-
- Set the **Provisioning Mode** to **Automatic**.
69-
- Configure the **Tenant URL** and **Secret Token** (email the Elementary team for a 1password vault with the configuration).
70-
- Click **Test Connection** to validate the setup.
71-
- Enable provisioning and save changes.
66+
<Accordion title="Configure Provisioning in Elementary">
67+
- Go to your account settings page in Elementary (Your avatar in the top right corner -> Account -> Settings)
68+
- In the Provisioning section, click on "Configure"
69+
- Choose "Azure AD", and click "Create" to create a new URL and token for provisioning
70+
- DO NOT close this dialog until you have configured SCIM in Azure AD
71+
</Accordion>
72+
73+
<Accordion title="Configure SCIM in Azure AD">
74+
- In the **Microsoft Entra portal**, go to **Enterprise Applications** and select the newly created SAML application.
75+
- Navigate to **Provisioning** and click **Get Started**.
76+
- Set the **Provisioning Mode** to **Automatic**.
77+
- Configure the **Tenant URL** and **Secret Token** - _value from Elementary Provisioning section_
78+
- Click **Test Connection** to validate the setup.
79+
- Enable provisioning and save changes.
80+
</Accordion>
7281

7382
This setup ensures that users are automatically created, updated, and deactivated in Elementary based on their status in Microsoft Entra ID. You can always reach out if you need any help.

docs/cloud/integrations/security-and-connectivity/okta.mdx

Lines changed: 35 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -89,33 +89,41 @@ Please follow the steps below to configure an SSO connection in Elementary.
8989

9090
Please follow the steps below to configure SCIM provisioning within Elementary:
9191

92-
- First, you should receive a 1Password link from the Elementary team - this contain the SCIM endpoint and access token that should be configured in Okta.
93-
- Under the **Elementary Data** app, go to the **General** tab, and click **Edit**. Then modify the **Provisioning** setting to **SCIM** and click **Save**.
94-
<img src="https://res.cloudinary.com/do5hrgokq/image/upload/v1749030738/okta7_qukvm9.png" />
95-
A new Provisioning tab should appear, click it and then click Edit.
96-
<img src="https://res.cloudinary.com/do5hrgokq/image/upload/v1749030738/okta8_hg0vhe.png" />
97-
- Please fill the following details:
98-
- **SCIM connector base URL** - _value from 1password link above_
99-
- **Unique identifier field for users** - email
100-
- **Supported provisioning actions** - mark all the “Push” settings (New users, Profile updates and Groups).
101-
- **Authentication Mode -** HTTP Header
102-
- **Authorization** - _access token from 1password link above_
103-
104-
When you are done, click on **Test Connector Configuration**
105-
<img src="https://res.cloudinary.com/do5hrgokq/image/upload/v1749030737/okta9_nooz3a.png" />
106-
Ensure that all the marked provisioning actions were successful:
107-
<img src="https://res.cloudinary.com/do5hrgokq/image/upload/v1749030738/okta10_ouhvea.png" />
108-
- Click **Save** to update the provisioning configuration.
109-
- Click the **To App** section on the left and click **Edit**:
110-
<img src="https://res.cloudinary.com/do5hrgokq/image/upload/v1749030737/okta11_xgcyvi.png" />
111-
- Please enable the settings:
112-
- Create Users
113-
- Update User Attributes
114-
- Deactivate Users
115-
116-
And click **Save.**
117-
118-
<Info>If you already created an “Elementary Users” group under the Assignments tab in the previous section, you may want to remove and re-add it to ensure all the users there are created successfully in Elementary. </Info>
92+
<Accordion title="Configure Provisioning in Elementary">
93+
- Go to your account settings page in Elementary (Your avatar in the top right corner -> Account -> Settings)
94+
- In the Provisioning section, click on "Configure"
95+
- Choose "Okta", and click "Create" to create a new URL and token for provisioning
96+
- DO NOT close this dialog until you have configured SCIM in Okta
97+
</Accordion>
98+
99+
<Accordion title="Configure SCIM in Okta">
100+
- Under the **Elementary Data** app, go to the **General** tab, and click **Edit**. Then modify the **Provisioning** setting to **SCIM** and click **Save**.
101+
<img src="https://res.cloudinary.com/do5hrgokq/image/upload/v1749030738/okta7_qukvm9.png" />
102+
A new Provisioning tab should appear, click it and then click Edit.
103+
<img src="https://res.cloudinary.com/do5hrgokq/image/upload/v1749030738/okta8_hg0vhe.png" />
104+
- Please fill the following details:
105+
- **SCIM connector base URL** - _value from Elementary Provisioning section_
106+
- **Unique identifier field for users** - email
107+
- **Supported provisioning actions** - mark all the “Push” settings (New users, Profile updates and Groups).
108+
- **Authentication Mode -** HTTP Header
109+
- **Authorization** - _access token from Elementary Provisioning section_
110+
111+
When you are done, click on **Test Connector Configuration**
112+
<img src="https://res.cloudinary.com/do5hrgokq/image/upload/v1749030737/okta9_nooz3a.png" />
113+
Ensure that all the marked provisioning actions were successful:
114+
<img src="https://res.cloudinary.com/do5hrgokq/image/upload/v1749030738/okta10_ouhvea.png" />
115+
- Click **Save** to update the provisioning configuration.
116+
- Click the **To App** section on the left and click **Edit**:
117+
<img src="https://res.cloudinary.com/do5hrgokq/image/upload/v1749030737/okta11_xgcyvi.png" />
118+
- Please enable the settings:
119+
- Create Users
120+
- Update User Attributes
121+
- Deactivate Users
122+
123+
And click **Save.**
124+
125+
<Info>If you already created an “Elementary Users” group under the Assignments tab in the previous section, you may want to remove and re-add it to ensure all the users there are created successfully in Elementary. </Info>
126+
</Accordion>
119127

120128
## **Pushing groups to Elementary**
121129

0 commit comments

Comments
 (0)