# SCIM Provisioning

{% hint style="warning" %}
To enable SCIM in your company, first enable [SAML](/organization-settings/user-management/sso-using-saml.md).
{% endhint %}

### Enable SCIM

{% stepper %}
{% step %}

### Luciq: Enable SAML first

Enable SAML in Luciq first.

Follow [SSO Using SAML](/organization-settings/user-management/sso-using-saml.md).
{% endstep %}

{% step %}

### Okta: Enable SCIM

In Okta, open the Luciq application.

Go to **General**.

In **Provisioning**, enable **SCIM**.

Click **Save**.

<figure><img src="https://downloads.intercomcdn.com/i/o/807118367/9f0ee6d946b3f7a6f2fa7a0f/f9327e1e-20a8-4f18-8539-1241ce35614b.png?expires=1764262800&#x26;signature=6b7957724df508875f8dfe4cb1a30ccbc0ae99ca313c563f5a786a43b3d33afb&#x26;req=fCAgF8h2nodYFb4f3HP0gETUO35ilQRqrIK3hhZDJBCLGxTEnCnodrz%2FNQPQ%0ALAPnF6cNjh%2FquWy0mw%3D%3D%0A" alt=""><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}

### Set up provisioning

{% stepper %}
{% step %}

### Luciq: Open the SCIM settings

In Luciq, go to **Account Management → Identity access management**.

Click **Configure** next to **SAML**.
{% endstep %}

{% step %}

### Okta: Open provisioning settings

In Okta, go to **Applications → Luciq → Provisioning**.

Click **Edit**.
{% endstep %}

{% step %}

### Okta: Enter the connector settings

In Okta, in **Provisioning**, enter these values:

1. Copy `SCIM basic URL` from Luciq to `SCIM connector base URL`.
2. Set `Unique identifier field for users` to `email`.
3. In `Supported provisioning actions`, enable `Push New Users` and `Push Profile Updates`.
4. Set `Authentication Mode` to `HTTP Header`.
5. Copy `Authentication Token` from Luciq to `Authorization`.
   {% endstep %}

{% step %}

### Luciq and Okta: Enable and test the integration

In Luciq, in **Account Management → Identity access management**, click **Enable**.

In Okta, in **Provisioning**, click **Test Connector Configuration**.

Click **Save**.
{% endstep %}
{% endstepper %}

{% hint style="warning" %}
Enable SCIM in Luciq before saving the integration settings in Okta.
{% endhint %}

### Set up provisioning to app

{% stepper %}
{% step %}

### Okta: Open the To App settings

In Okta, go to **Applications → Luciq → Provisioning → To App**.

Click **Edit**.

<figure><img src="https://downloads.intercomcdn.com/i/o/807123107/8ef55c886774887c31ff9603/3bb1a9f4-b273-4a2a-be65-103e45fe80cc.png?expires=1764262800&#x26;signature=c598f11d26c918ea314e5108b3d4445aec552876271b8c6117d035fafe7c897a&#x26;req=fCAgF8t9nIFYFb4f3HP0gIxEIvEnzFX8ZKUjRvWgpdn%2FZtrMHaFr%2BceLGFQN%0AeZyrY2R0T1BiZI6pkg%3D%3D%0A" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

### Okta: Enable user lifecycle actions

In Okta, in **Provisioning → To App**, enable **Create Users** and **Deactivate Users**.

Click **Save**.

<figure><img src="https://downloads.intercomcdn.com/i/o/ih9pma6x/1401638173/f5d35e212dbbf9d533946e8c5556/image.png?expires=1764262800&#x26;signature=a7d593d1e26107da88b0630650f861a54e6c3c87c7d8ebd3a7332b72e16467ff&#x26;req=dSQnF899lYBYWvMW1HO4zX9d9S1rNJCpp%2Fg340rW9X1El%2FXT8INPqHXT55UQ%0AiAQDeU%2FOxEX3o0Pqszs%3D%0A" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

### Okta: Import existing users

In Okta, import existing users to keep access consistent for everyone.

<figure><img src="/files/4bqoOHIYhxj6JFJ65bAV" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

### Luciq and Okta: Confirm the setup

You have now enabled and configured SCIM in Luciq and Okta.

User assignments and unassignments now sync from Okta to Luciq.
{% endstep %}
{% endstepper %}

{% hint style="success" %}
**Recommendation**

You can also configure Luciq role and app access mapping during provisioning.

Follow [Advanced SCIM Provisioning](/organization-settings/user-management/scim-provisioning/advanced-scim-provisioning.md) to enable role and app access mapping.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.luciq.ai/organization-settings/user-management/scim-provisioning.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.