Configure Okta SCIM Provisioning to Oracle Cloud

Configuring automated user provisioning between Okta and Oracle requires using the Oracle Human Capital Management (HCM) application from the Okta Integration Network (OIN) via the System for Cross-domain Identity Management (SCIM) REST API. This integration allows for automated user creation, profile updates, and deactivation. Ensure the Oracle HCM environment has the SCIM REST APIs enabled, use the correct Server URL format to prevent validation errors, and avoid using a generic testing SCIM application that does not follow the URN schema format expected by Oracle Cloud.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• User Lifecycle Management
• Oracle Human Capital Management (HCM) Cloud
• System for Cross-domain Identity Management (SCIM) 2.0

The integration requires specific endpoint configurations and administrative roles within Oracle HCM to allow Okta to communicate with the /hcmRestApi/scim/ resources. A common point of failure is entering an incorrect Server URL format (for example, including the API path or protocol prefixes) that does not match Okta’s required validation pattern, or creating a Testing SCIM app, which does not follow the URN schema format expected by Oracle Cloud.

Add the Oracle Human Capital Management application to Okta.

Add the Oracle Human Capital Management application from the Okta Integration Network catalog to begin the integration.

1. Navigate to Applications > Applications in the Okta Admin Console.
2. Select Browse App Catalog, search for Oracle Human Capital Management, and select Add Integration.

What steps configure the API integration?

Configure the API integration by entering the Oracle tenant domain and administrative credentials.

1. Navigate to the Provisioning tab and select Configure API Integration.
2. Select Enable API integration.
3. Enter the Oracle tenant domain in the Server URL field without https:// and without /hcmRestApi.

myoracletenant.oraclecloud.com

NOTE: Ensure there are no trailing slashes or hidden spaces at the end of the domain string to prevent validation errors.
4. Enter the Admin Username and Password for an Oracle user with the IT Security Manager role.
5. Select Test API Credentials and then select Save.