> For the complete documentation index, see [llms.txt](https://docs.luciq.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.luciq.ai/organization-settings/user-management/scim-provisioning.md).

# SCIM Provisioning

{% hint style="warning" %}
To enable SCIM in your company, first enable [SAML](/organization-settings/user-management/sso-using-saml.md).
{% endhint %}

### Enable SCIM

{% stepper %}
{% step %}

### Luciq: Enable SAML first

Enable SAML in Luciq first.

Follow [SSO Using SAML](/organization-settings/user-management/sso-using-saml.md).
{% endstep %}

{% step %}

### Okta: Enable SCIM

In Okta, open the Luciq application.

Go to **General**.

In **Provisioning**, enable **SCIM**.

Click **Save**.

<figure><img src="https://downloads.intercomcdn.com/i/o/807118367/9f0ee6d946b3f7a6f2fa7a0f/f9327e1e-20a8-4f18-8539-1241ce35614b.png?expires=1764262800&#x26;signature=6b7957724df508875f8dfe4cb1a30ccbc0ae99ca313c563f5a786a43b3d33afb&#x26;req=fCAgF8h2nodYFb4f3HP0gETUO35ilQRqrIK3hhZDJBCLGxTEnCnodrz%2FNQPQ%0ALAPnF6cNjh%2FquWy0mw%3D%3D%0A" alt=""><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}

### Set up provisioning

{% stepper %}
{% step %}

### Luciq: Open the SCIM settings

In Luciq, go to **Account Management → Identity access management**.

Click **Configure** next to **SAML**.
{% endstep %}

{% step %}

### Okta: Open provisioning settings

In Okta, go to **Applications → Luciq → Provisioning**.

Click **Edit**.
{% endstep %}

{% step %}

### Okta: Enter the connector settings

In Okta, in **Provisioning**, enter these values:

1. Copy `SCIM basic URL` from Luciq to `SCIM connector base URL`.
2. Set `Unique identifier field for users` to `email`.
3. In `Supported provisioning actions`, enable `Push New Users` and `Push Profile Updates`.
4. Set `Authentication Mode` to `HTTP Header`.
5. Copy `Authentication Token` from Luciq to `Authorization`.
   {% endstep %}

{% step %}

### Luciq and Okta: Enable and test the integration

In Luciq, in **Account Management → Identity access management**, click **Enable**.

In Okta, in **Provisioning**, click **Test Connector Configuration**.

Click **Save**.
{% endstep %}
{% endstepper %}

{% hint style="warning" %}
Enable SCIM in Luciq before saving the integration settings in Okta.
{% endhint %}

### Set up provisioning to app

{% stepper %}
{% step %}

### Okta: Open the To App settings

In Okta, go to **Applications → Luciq → Provisioning → To App**.

Click **Edit**.

<figure><img src="https://downloads.intercomcdn.com/i/o/807123107/8ef55c886774887c31ff9603/3bb1a9f4-b273-4a2a-be65-103e45fe80cc.png?expires=1764262800&#x26;signature=c598f11d26c918ea314e5108b3d4445aec552876271b8c6117d035fafe7c897a&#x26;req=fCAgF8t9nIFYFb4f3HP0gIxEIvEnzFX8ZKUjRvWgpdn%2FZtrMHaFr%2BceLGFQN%0AeZyrY2R0T1BiZI6pkg%3D%3D%0A" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

### Okta: Enable user lifecycle actions

In Okta, in **Provisioning → To App**, enable **Create Users** and **Deactivate Users**.

Click **Save**.

<figure><img src="https://downloads.intercomcdn.com/i/o/ih9pma6x/1401638173/f5d35e212dbbf9d533946e8c5556/image.png?expires=1764262800&#x26;signature=a7d593d1e26107da88b0630650f861a54e6c3c87c7d8ebd3a7332b72e16467ff&#x26;req=dSQnF899lYBYWvMW1HO4zX9d9S1rNJCpp%2Fg340rW9X1El%2FXT8INPqHXT55UQ%0AiAQDeU%2FOxEX3o0Pqszs%3D%0A" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

### Okta: Import existing users

In Okta, import existing users to keep access consistent for everyone.

<figure><img src="/files/4bqoOHIYhxj6JFJ65bAV" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

### Luciq and Okta: Confirm the setup

You have now enabled and configured SCIM in Luciq and Okta.

User assignments and unassignments now sync from Okta to Luciq.
{% endstep %}
{% endstepper %}

{% hint style="success" %}
**Recommendation**

You can also configure Luciq role and app access mapping during provisioning.

Follow [Advanced SCIM Provisioning](/organization-settings/user-management/scim-provisioning/advanced-scim-provisioning.md) to enable role and app access mapping.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.luciq.ai/organization-settings/user-management/scim-provisioning.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.