Skip to content

Okta SCIM provisioning with Bruno

This guide will walk you through setting up SCIM (System for Cross-domain Identity Management) provisioning with Bruno using Okta SWA (Secure Web Authentication).

Prerequisites: Before configuring Okta, you must first enable SCIM provisioning in Bruno and generate an API key. Follow the Enabling SCIM Provisioning section in the overview page to complete this setup and save your API key for use in the steps below.

Create your Okta App

Already have an Okta App for SSO? If you previously set up a Bruno Okta application for SAML SSO, you can reuse it for SCIM provisioning. Skip to the Configure your Okta App section to add provisioning to your existing application.

  1. As an Okta admin, navigate to Applications and click Create App Integration

<img src="/v2/images/screenshots/sso-scim-management/okta/okta-swa-1.webp" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} />

  1. Select SWA - Secure Web Authentication and click Next

<img src="/v2/images/screenshots/sso-scim-management/okta/okta-swa-2.webp" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} />

  1. On the Create SWA Integration page, add the following values and click Finish:
  2. App name: (Unique App Name - e.g. Bruno SCIM Integration)
  3. App's login page URL: https://license.usebruno.com/

<img src="/v2/images/screenshots/sso-scim-management/okta/okta-swa-3.webp" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} />

Configure your Okta App

  1. On your newly created application page, select the General tab
  2. Under App Settings, select Edit, and check the Provisioning option SCIM and click Save

<img src="/v2/images/screenshots/sso-scim-management/okta/okta-swa-5.webp" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} />

  1. Return to your Okta app, select the Provisioning tab, under SCIM Connection select Edit and configure the following values:
  2. SCIM connector base URL: https://license.usebruno.com/scim/v2
  3. Unique identifier field for users: email
  4. Supported provisioning actions: Check the following options:
    • Import New Users and Profile Updates
    • Push New Users
    • Push Profile Updates
    • Push Groups
  5. Authentication: set to HTTP Header
  6. Under HTTP Header, for token: add the generated API Key value from the prerequisites step

<img src="/v2/images/screenshots/sso-scim-management/okta/okta-swa-7.webp" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} />

  1. Click Test Connector Configuration. If successful, a Connector configured successfully message dialogue appears.

<img src="/v2/images/screenshots/sso-scim-management/okta/okta-swa-8.webp" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} />

  1. Click Save to complete the Provisioning integration.

  2. Under the Provisioning tab, select the To Apps setting, edit and enable the following options and click Save:

  3. Create Users
  4. Update User Attributes
  5. Deactivate Users

<img src="/v2/images/screenshots/sso-scim-management/okta/okta-swa-9.webp" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} />

Your SCIM integration is now complete. You can now begin assigning users to Bruno.

Assign people and groups to Bruno in Okta

  1. Under your created Bruno Application, navigate to the Assignments tab

  2. Select Assign and either Assign to People or Assign to Groups to provision Bruno license keys

<img src="/v2/images/screenshots/sso-scim-management/okta/okta-swa-15.webp" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} />

<img src="/v2/images/screenshots/sso-scim-management/okta/okta-swa-16.webp" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} />

  1. Assigned Users will receive an email with their License Key

<img src="/v2/images/screenshots/sso-scim-management/okta/okta-swa-12.webp" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} />

Deprovision users from Bruno in Okta

  1. Under your created Bruno Application, navigate to the Assignments tab <img src="/v2/images/screenshots/sso-scim-management/okta/okta-swa-13.webp" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} />
  2. Remove the desired users or groups, their license key(s) will be deactivated and they will receive an email notification <img src="/v2/images/screenshots/sso-scim-management/okta/okta-swa-14.webp" alt="License portal login" style={{ width: '800px', marginTop: '1rem', borderRadius: '0.5rem' }} />

For more information about configuring SCIM provisioning with Okta, refer to these Okta documentation resources: