> For the complete documentation index, see [llms.txt](https://docs.luciq.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.luciq.ai/organization-settings/user-management/scim-provisioning.md).

# SCIM Provisioning

Configure SCIM provisioning for your Luciq organization. Sync your identity provider's directory to automatically provision and deprovision team members.

{% hint style="warning" %}
To enable SCIM in your company, first enable [SAML](/organization-settings/user-management/sso-using-saml.md).
{% endhint %}

### Enable SCIM

{% stepper %}
{% step %}

### Luciq: Enable SAML first

Enable SAML in Luciq first.

Follow [SSO Using SAML](/organization-settings/user-management/sso-using-saml.md).
{% endstep %}

{% step %}

### Okta: Enable SCIM

In Okta, open the Luciq application.

Go to **General**.

In **Provisioning**, enable **SCIM**.

Click **Save**.

<figure><img src="https://downloads.intercomcdn.com/i/o/807118367/9f0ee6d946b3f7a6f2fa7a0f/f9327e1e-20a8-4f18-8539-1241ce35614b.png?expires=1764262800&#x26;signature=6b7957724df508875f8dfe4cb1a30ccbc0ae99ca313c563f5a786a43b3d33afb&#x26;req=fCAgF8h2nodYFb4f3HP0gETUO35ilQRqrIK3hhZDJBCLGxTEnCnodrz%2FNQPQ%0ALAPnF6cNjh%2FquWy0mw%3D%3D%0A" alt=""><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}

### Set up provisioning

{% stepper %}
{% step %}

### Luciq: Open the SCIM settings

In Luciq, go to **Account Management → Identity access management**.

Click **Configure** next to **SAML**.
{% endstep %}

{% step %}

### Okta: Open provisioning settings

In Okta, go to **Applications → Luciq → Provisioning**.

Click **Edit**.
{% endstep %}

{% step %}

### Okta: Enter the connector settings

In Okta, in **Provisioning**, enter these values:

1. Copy `SCIM basic URL` from Luciq to `SCIM connector base URL`.
2. Set `Unique identifier field for users` to `email`.
3. In `Supported provisioning actions`, enable `Push New Users` and `Push Profile Updates`.
4. Set `Authentication Mode` to `HTTP Header`.
5. Copy `Authentication Token` from Luciq to `Authorization`.
   {% endstep %}

{% step %}

### Luciq and Okta: Enable and test the integration

In Luciq, in **Account Management → Identity access management**, click **Enable**.

In Okta, in **Provisioning**, click **Test Connector Configuration**.

Click **Save**.
{% endstep %}
{% endstepper %}

{% hint style="warning" %}
Enable SCIM in Luciq before saving the integration settings in Okta.
{% endhint %}

### Set up provisioning to app

{% stepper %}
{% step %}

### Okta: Open the To App settings

In Okta, go to **Applications → Luciq → Provisioning → To App**.

Click **Edit**.

<figure><img src="https://downloads.intercomcdn.com/i/o/807123107/8ef55c886774887c31ff9603/3bb1a9f4-b273-4a2a-be65-103e45fe80cc.png?expires=1764262800&#x26;signature=c598f11d26c918ea314e5108b3d4445aec552876271b8c6117d035fafe7c897a&#x26;req=fCAgF8t9nIFYFb4f3HP0gIxEIvEnzFX8ZKUjRvWgpdn%2FZtrMHaFr%2BceLGFQN%0AeZyrY2R0T1BiZI6pkg%3D%3D%0A" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

### Okta: Enable user lifecycle actions

In Okta, in **Provisioning → To App**, enable **Create Users** and **Deactivate Users**.

Click **Save**.

<figure><img src="https://downloads.intercomcdn.com/i/o/ih9pma6x/1401638173/f5d35e212dbbf9d533946e8c5556/image.png?expires=1764262800&#x26;signature=a7d593d1e26107da88b0630650f861a54e6c3c87c7d8ebd3a7332b72e16467ff&#x26;req=dSQnF899lYBYWvMW1HO4zX9d9S1rNJCpp%2Fg340rW9X1El%2FXT8INPqHXT55UQ%0AiAQDeU%2FOxEX3o0Pqszs%3D%0A" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

### Okta: Import existing users

In Okta, import existing users to keep access consistent for everyone.

<figure><img src="https://2991836969-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCha1KrkvNKPdcC0aGvuB%2Fuploads%2Fgit-blob-7aa2838230359b9c6c5951734cb4f2cb2ca56582%2FScreenshot%202026-03-18%20at%202.50.08%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

### Luciq and Okta: Confirm the setup

You have now enabled and configured SCIM in Luciq and Okta.

User assignments and unassignments now sync from Okta to Luciq.
{% endstep %}
{% endstepper %}

{% hint style="success" %}
**Recommendation**

You can also configure Luciq role and app access mapping during provisioning.

Follow [Advanced SCIM Provisioning](/organization-settings/user-management/scim-provisioning/advanced-scim-provisioning.md) to enable role and app access mapping.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.luciq.ai/organization-settings/user-management/scim-provisioning.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.