docs/developing/guides/auth-and-provision/how-to-setup-scim-with-okta.mdx
</Step>
<Step title="Click on Create App Integration">
</Step>
<Step title="Select SAML or OIDC and Web App, then click Next">
Note you will have to fill in the appropriate fields for the SAML or OIDC setup to continue.
- [SAML Setup](/developing/guides/auth-and-provision/sso-setup#setting-up-saml-login)
- [OIDC Setup](/developing/guides/auth-and-provision/sso-setup#setting-up-oidc-login)
</Step>
<Step title="Enable SCIM provisioning">
Once the application is created, under General -> App Settings, click "Edit" and then the checkbox "Enable SCIM provisioning".
</Step>
<Step title="Go to Directory Sync in Cal.com">
Next, go to your instance of Cal.com and navigate to `https://app.cal.com/settings/organization/dsync` and click configure.
</Step>
<Step title="Configure Directory Sync">
In the "Configure Directory Sync" form, choose a directory sync name and select "Okta SCIM v2.0" as the "Directory Provider".
</Step>
<Step title="Take note of SCIM Base URL and SCIM Bearer Token">
</Step>
<Step title="Setup Provisioning in Okta">
In Okta, go to your application. Navigate to the "Provisioning" tab and click "Integration" under "Settings".
- Under "SCIM connector base URL" enter the "SCIM Base URL" from Cal.com
- Under "Unique identifier field for users" enter "email"
- Under "Supported provisioning actions" enable:
- "Import New Users and Profile Updates"
- "Push New Users"
- "Push Profile Updates"
- "Push Groups"
- Under "Authentication Mode" choose "HTTP Header"
- Under "Authentication" enter the "SCIM Bearer Token" from Cal.com
- When you hit save, it will make a test call to the "SCIM Base URL"
</Step>
<Step title="Go to the 'To App' settings">
After saving, navigate to the "To App" settings, still under the "Provisioning" tab.
</Step>
<Step title="Enable Provisioning to App">
Under "Provisioning to App", click "Edit" and enable:
- "Create User"
- "Update User Attributes"
- "Deactivate User"
</Step>
<Step title="Update Attribute Mapping">
Under "\{Your application name\} Attribute Mapping," remove all fields except for:
- "username"
- "givenName"
- "familyName"
- "email"
- "displayName"
</Step>
<Step title="Map Attributes from Okta Profile">
Set each of these properties to "Map from Okta Profile" and the related field. Under "Apply On" select "Create and Update".
</Step>
<Step title="Assign users and groups to the app">
You can now assign users and groups to the app.
</Step>
When provisioning groups to your organization, Okta groups can be mapped to teams within your organization, and users will be auto-assigned to these teams.
On https://app.cal.com/settings/organization/dsync, there is a table with the teams under your organization. Click on "Add group name" to map the Okta group to the team.
When you push the group to your organization, those users will automatically be added to the team.