Configure System for Cross-domain Identity Management (SCIM) provisioning for the Paylocity application in Okta by creating a SCIM user in Paylocity and configuring the API integration in Okta. Paylocity acts as a Human Resources (HR) source for inbound provisioning and does not allow creating, updating, or deleting users from Okta to Paylocity.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Paylocity
• Provisioning
• User Lifecycle Management

How is a SCIM user created in Paylocity?

Create a SCIM user in Paylocity to generate the credentials required for the Okta API integration by following these steps.

1. Navigate to HR & Payroll > User Access > SSO Configuration in Paylocity.
2. Select SCIM Provisioning.
3. Select Yes under Enable SCIM Provisioning.
4. Enter a username. Usernames must be between 8 and 20 characters and must not contain any special characters other than underscores (_) and periods (.).
5. Enter the password and confirm the password.
6. Select Save.

How is SCIM provisioning added to the Paylocity application in Okta?

Add the Paylocity application from the Okta Integration Network (OIN) catalog and configure the API integration using the Paylocity SCIM user credentials by following these steps.

1. Add the Paylocity application using the OIN catalog in Okta.

2. Select the Provisioning tab and select Configure API Integration.

   Review the Configure API Integration button in the Provisioning tab.

   

3. Enter the SCIM user credentials set in the Paylocity Single Sign-On (SSO) configuration when the Paylocity login page opens. These are not the typical credentials employed for logging into Paylocity to access employee information. Scheduled automated imports do not require this step.

NOTE: Paylocity provides this documentation, which is subject to change. Contact Paylocity Support if errors occur that cannot be resolved with this guide.

Related References

• Paylocity: User provisioning with Okta