User17110457138073698013 (Customer) asked a question.
[SCIM] Does okta SCIM integration support custom resources -- besides Users and Groups?
On the SCIM protocol integration
In RFC7643, there are mentions of two "core" resources, namely `Users` and `Groups`, but it also acknowledges the possibility of defining new resources [1,2]. I'm curious to know if Okta supports provisioning additional resources through SCIM (CRUD operations).
To clarify, I'm interested in the use case where I can manage users, groups, and other custom resources within Okta and have these resources automatically provisioned on an external SCIM API that recognizes the mentioned resources.
Thank you for any insights or information on this matter.
References:
[1] https://datatracker.ietf.org/doc/html/rfc7643#section-3.2
@User17110457138073698013 (Customer) - I may not be fully understanding your ask. But based on the sections you linked this is just extending the available properties that can be mapped from/to an application/service that supports SCIM.
Okta's Universal Directory allows you to extend the schema and make custom attributes part of all user profiles. Once extended they become valid targets/sources to either receive/propagate data.
Creating new attributes: https://support.okta.com/help/s/article/How-to-Create-a-New-Custom-Attribute-in-Okta?language=en_US
Mapping (for propagation) information is here: https://help.okta.com/en-us/content/topics/users-groups-profiles/usgp-map-attributes.htm
Hi @User16194532180262570057 (Workflows),
Thank you for your response and for providing information on extending the schema in Okta's Universal Directory.
I apologize if my question wasn't clear initially. Allow me to provide some additional context.
While I understand that Okta allows for extending the schema to include custom attributes within user profiles, my inquiry is specifically focused on provisioning and managing custom resources [1], beyond just users and groups, through the SCIM protocol integration.
To elaborate further, I'm interested in a scenario where Okta can not only manage users and groups but also other types of resources (e.g., companies, departments, projects) through CRUD operations via the SCIM API. This would involve creating, updating, and deleting instances of these custom resources in Okta and having them automatically provisioned on an external SCIM API that recognizes these additional resource types.
I hope this provides clarity on my question. Essentially, I'm exploring the capability of Okta's SCIM integration to handle custom resource provisioning beyond just users and groups.
Thank you for any insights or information you can provide on this matter.
References:
[1] https://datatracker.ietf.org/doc/html/rfc7643#section-3.2