Use the System for Cross-domain Identity Management (SCIM) provisioning process to set up Single Sign-On (SSO) to manage user identities in the cloud. Oracle Cloud Infrastructure (OCI) Identity and Access Management supports user life cycle management between Okta and OCI Identity and Access Management.

1. In Okta, click Admin.
2. In the left pane, click Applications, then Applications.
3. Click Create App Integration.
4. Select SAML 2.0, then click Next.

5. In the App name field, enter OCI OKTA SCIM Integration, then click Next.

6. Perform steps 6 to 10 from the PROVISION SCIM section in the following Oracle Configuration Guide: 
7. In Okta, in the Single sign-on URL field, enter the copied text.
8. In OCI, on the Provider ID row, click Copy.
9. In Okta, in the Audience URI (SP Entity ID) field, enter the copied text.
10. In the Default RelayState field, enter https://oc2.cloud.oracle.com/?tenant=yourtenancyname&domain=domainname (Retrieve the tenant and domain values from the URL in the address bar of the OCI page)

11. Click Next.
12. Select App type This is an internal app that we have created, then click Finish.

13. Click the General tab.
14. Beside App Settings, click Edit.
15. Beside Provisioning, select SCIM, then click Save.

16. Click the Provisioning tab.
17. Beside SCIM Connection, click Edit.
18. Enter the domain URL:
    1. In Okta, in the SCIM connector base URL field, enter the OCI domain URL.
    2. Replace the training :433 with /admin/v1
19. In the Unique identifier field for users, enter userName
20. Beside Supported provisioning actions, select:
    • Import New Users and Profile Updates
    • Push New Users
    • Push Profile Updates
    • Push Groups
21. In the Authentication Mode dropdown, select HTTP Header.
22. Enter the authorization token:
    1. Generate a base64 encoded token as demonstrated in step 26 from the PROVISION SCIM section instructed in the Oracle Configuration Guide
    2. In Okta, under HTTP Header, enter the token in the Authentication field. 

1. 1. (Optional) Click Test Connector Configuration.

16. 2. Click Save.
17. Beside Provisioning to App, click Edit.
18. Enable:
    • Create Users
    • Update User Attributes
    • Deactivate User
19. Click Save.

20. Click the Assignments tab, expand the Assign dropdown, click Assign to People, set up the assignment, and click Done.
    The new user should appear in the Default domain's Users list in OCI.
21. Go to the Import tab and click Import Now. The administrators should be listed.