
AlexF.83532 (Customer) asked a question.
We are a SaaS provider and are planning to support Okta for SCIM.
We have been able to successfully test our integration code using an "Okta Integrator account".
I have seen there are 2 types of integration
- Local SCIM App via "SAML 2.0" -> Enable Provisioning on an existing locally App
- Private SCIM integration -> https://developer.okta.com/docs/guides/scim-provisioning-integration-connect/main/*
Both of these approaches worked for us, however the Private Application suits us better as it supports the PATCH API for Group memberships.
The App I selected for this was the "SCIM 2.0 Test App (OAuth Bearer)" which when configured worked as expected with 100% functionality.
My questions relate to the deployment and support of this App for Production scenarios.
I have seen this answer, but it does not explicitly mention production support.
https://support.okta.com/help/s/article/What-are-SCIM-20-Test-Apps?language=en_US
Do our customers (without an Integrator account) have the ability to add one of these "Test Apps" from their catalog?
If they do, must they publish the App to the OIN to be supported?
Thanks for your time in advance.

Hello @AlexF.83532 (Customer) , I've brought up your question with a few of our colleagues who specialize in SCIM integrations.
SCIM Test apps could be used in production. However, they are designed to behave similarly to how an OIN application does, which is different from a custom SWA or SAML app with provisioning enabled.
There were Private OIN apps, but we no longer accept those anymore.
This being said, the following options should be viable for your use case:
If this is an integration for multiple mutual customers, submitting your integration to the OIN will make for an easier configuration for these customers, as it will simplify their setup. Please see: Publish an OIN integration.
If that's not an option, you could instruct the admins to instead manually configure an application with SCIM (either a SCIM Test app or a custom app with SCIM enabled).
Regards.
--
Help others in the community by liking or hitting Select as Best if this response helped you.