Integrating Oracle Cloud Infrastructure (OCI) with Okta using SCIM allows administrators to manage user identities in the cloud. Administrators configure a SAML 2.0 application in the Okta Admin Console and configure the SCIM connection settings to establish the integration.See the following Oracle SAML Configuration Guide for more details.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• System for Cross-domain Identity Management (SCIM)
• Oracle Cloud Infrastructure

How is the Oracle Cloud Infrastructure application created in Okta?

Create a SAML 2.0 application in the Okta Admin Console and configure the Single Sign-On (SSO) settings using the details from the Oracle Cloud Infrastructure provider.

1. Go to Applications > Applications in the Okta Admin Console.
2. Click Create App Integration.
3. Select SAML 2.0 and click Next.

The following image demonstrates the selection of the SAML 2.0 sign-in method in the Okta Admin Console.

 

4. Enter OCI OKTA SCIM Integration in the App name field and click Next.

The following image shows how to enter the application name in the general settings.

5. Perform steps 6 to 10 from the PROVISION SCIM section in the Oracle Configuration Guide.
6. Enter the copied text in the Single sign-on URL field in Okta.
7. Click Copy on the Provider ID row in OCI.
8. Enter the copied text in the Audience URI (SP Entity ID) field in Okta.
9. Enter https://oc2.cloud.oracle.com/?tenant=<yourtenancyname>&domain=<domainname> in the Default RelayState field. Retrieve the tenant and domain values from the URL in the address bar of the OCI page.

The following image demonstrates the configured SAML settings for the Oracle Cloud Infrastructure application.

10. Click Next.
11. Select This is an internal app that we have created as the application type and click Finish.

The following image demonstrates the selection of the internal application type.

Configure the System for Cross-domain Identity Management connection settings.

Enable SCIM provisioning in the application settings and configure the API connection using the Oracle Cloud Infrastructure domain URL and authorization token.

1. Go to the General tab of the application.
2. Click Edit next to App Settings.
3. Select SCIM next to Provisioning and click Save.

The following image demonstrates enabling SCIM provisioning in the application settings.

 

4. Go to the Provisioning tab.
5. Click Edit next to SCIM Connection.
6. Enter the OCI domain URL in the SCIM connector base URL field and replace the trailing :433 with /admin/v1.
7. Enter userName in the Unique identifier field for users field.
8. Select Import New Users and Profile Updates, Push New Users, Push Profile Updates, and Push Groups next to Supported provisioning actions.
9. Select HTTP Header in the Authentication Mode dropdown menu.
10. Generate a base64 encoded token as demonstrated in step 26 from the PROVISION SCIM section in the Oracle Configuration Guide.
11. Enter the token in the Authentication field under HTTP Header.

The following image demonstrates the configured SCIM connection settings.

12. Click Test Connector Configuration to verify the connection.

The following image demonstrates a successful connector configuration test.

 

13. Click Save.
14. Click Edit next to Provisioning to App.
15. Enable Create Users, Update User Attributes, and Deactivate Users.
16. Click Save.

The following image demonstrates the enabled provisioning actions to the application.

Assign users and import administrators to complete the integration.

Assign users to the application in Okta to provision them to Oracle Cloud Infrastructure, and import existing administrators from the provider.

1. Go to the Assignments tab.
2. Expand the Assign dropdown menu and click Assign to People.
3. Set up the assignment and click Done. The new user appears in the Default domain's Users list in OCI.
4. Go to the Import tab and click Import Now to list the administrators.

The following image shows the import tab after administrators have been imported.

Related References

• Oracle SAML Configuration Guide
• Oracle Configuration Guide