To configure SCIM with Okta for your organization, you must have administrator access for both Okta and Apidog.Preparation#
Before configuring in the Okta admin console, please navigate to the SAML SSO page in Apidog organization settings. Click the Generate SCIM Token button and keep this page open during the following steps.Modify SSO Configuration#
To make SCIM work properly, you need to modify the SSO Application username format:Open the Okta admin console in a browser.
Go to Applications and select the corresponding app.
Under the Sign On tab, click Edit button in the Settings tab.
In the Credentials Details:Set Application username format to Custom.
Enter the following expression:user.getInternalProperty("id").
Open the Okta admin console in a browser.
Go to Applications and click the corresponding app. Under the General tab, click the Edit button in the App Settings section. Change the Provisioning option from None to SCIM.
After saving, a new Provisioning tab will appear next to Sign On tap. Click on it, then click Edit in the SCIM Connection section.
Copy Apidog’s SCIM API Endpoint URL and paste it into Okta’s SCIM connector base URL field.
For Unique identifier field for users in Okta: enter userName.
For Supported provisioning actions in Okta:, check Import New Users, Profile Updates and Push New Users.
For Authentication Mode:, select HTTP Header.
Copy Apidog’s SCIM Token and paste it into Okta’s Authorization field.
After completing the configuration, click Test Connector Configuration in Okta. If you see checkmarks next to User Import, Import Profile Updates, and Create Users, the setup is successful. Close the test window and save the configurations.
In the Okta App’s Provisioning Settings tab under the To App section, click Edit in the Provisioning to App section, and enable Create Users by checking Enable.
Test Your SCIM#
Go back to Apidog, where you will see a list of inactive users.Once these inactive members log in using SSO, their status will change to active, and they will occupy paid seats.
Users in an inactive state do not occupy any paid seats.
Modified at 2025-04-30 09:20:41
