# How to Configure SCIM with Okta ThousandEyes users can be added, deleted and modified using SCIM 2.0 and 1.1 compatible identity providers, dramatically decreasing time to provision users into ThousandEyes. This document describes the integration between identity provider Okta and ThousandEyes. This integration has been fully tested by Okta and ThousandEyes but it's currently not available for all Okta organizations. If you wish to try user provisioning on ThousandEyes through Okta, please reach us at . ## Prerequisites To perform configuration in ThousandEyes, a user having a role with the following permissions is required: * *View Users* * *Edit Users* * *API Access* ## Supported Features * User provisioning (creation) * User deletion * User modification * Display name Group information or other user attributes cannot be translated into Account Groups, Roles or any other ThousandEyes structure. ## Configuration To begin, open Okta and click on the **Admin** button on the top right: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-f70c1937c49ce76bd6a42cbcae6b1a1150e90703%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-1.png?alt=media\&token=cb82d710-9fec-4997-9238-8922f98ff7ef) Once in the dashboard, click on the Applications menu, and then on the Applications sub menu: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-c3a00b403373764b4ef77df073fbec01e72d5855%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-2.png?alt=media\&token=fcff41f7-66f5-4285-9ce7-e7bde1e5dbfb) Click on **Add Application**: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-95e0bba539b5b3cd8c17d7178f2604800139cc6b%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-3.png?alt=media\&token=ffd002b2-41de-498c-831d-80c373a4eb6e) Type “ThousandEyes” in the search bar, then click on the **Add** button of the listed ThousandEyes App: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-c8cf09c0b9c951b4c2ec06c7ab80f67746826049%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-4.png?alt=media\&token=ca989483-2717-4fd0-aea5-edbf9cb69a4f) Type in a Name for your Application, then click Next: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-9c873622cf832b693df4e7671e9e09012f625239%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-5.png?alt=media\&token=9f14336e-cf87-452f-9b94-2f321ceaf25c) Under “Application username format” select in the drop down menu the “Email” option. If you wish to configure SAML 2.0 SSO click on the “View Setup Instructions” button and follow the steps on the following page to finish SSO configuration in ThousandEyes. Otherwise, you can ignore this part of the configuration and click **Next**. ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-da8e532845e5c0810a92f390430dcb3ee056f7da%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-6.png?alt=media\&token=458be3db-3bbf-49d5-b158-6ea702f50415) In the provisioning settings, check the **Enable provisioning features** box: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-1836e851f86203406923e3a04d96ac1dac4a735f%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-7.png?alt=media\&token=e6d26ab2-e6c1-47bb-855d-6282cd0af9a8) Now enter the following information in the “API Credentials” form: * **Username**: ThousandEyes username (email) with a role having permissions to create accounts * **Password**: API token of the selected ThousandEyes user (found at **Manage > Account Settings > Users and Roles > Profile**) ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-5bf4531452a2682ab9cb8ce164dfa2d2131c281c%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-8.png?alt=media\&token=4e34f0e7-f5d5-46c1-aa0a-b2fdd7946a9e) Click on **Test API credentials** to make sure the API token and username were entered correctly. This should return a message similar to this one: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-b40762ba02c7a4feb034fd80cda72acb38cc7306%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-9.png?alt=media\&token=23b536d2-a606-4cd9-8066-59b73be88447) If an error is present, verify that the selected user has the permissions stated in the Requirements section of this document. If the issues persist, please contact ThousandEyes Customer Success Center () to assist. Under “Provisioning Features” select the following options: * **User Import** - Enabled * **Schedule Import** - Select a time * **Okta username format** - Email address ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-4bd38b5d61c6eb3281392a5ed70c07fb154366f1%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-10.png?alt=media\&token=9f700fd3-5c2e-4d2e-bbbd-4fb6037ec70c) * **Create Users** - Enabled * **Update User Attributes** - Enabled * **Deactivate Users** - Enabled ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-aa8de6ba8e02f5d8345fbe1d24ae00f61f384ef9%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-11.png?alt=media\&token=920cf6fb-8a7e-4b60-bb66-8040a1e565d0) Once this is completed, click on **Next**. Optional: Add users now so they are integrated to the App. Otherwise just click on “Next” ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-10d84f048bcb1c67840e60e2c5f29fc045b7441a%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-12.png?alt=media\&token=d923e7ed-9e29-4bd4-8da9-503a0b58ac0b) And click on “Done” to finish the configuration: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-9a44aef16967f640e235bda8695c03911dcd799c%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-13.png?alt=media\&token=d4da228c-2b23-45fe-aebb-0d35249bbbab) At this point of time, setup of SCIM with ThousandEyes is complete. ## Testing the SCIM Integration ### Adding Users To verify that the integration is working, add a user to the Application. From the home page, go to Applications > Applications ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-4bf0c3962490c7f9f3532c0f538c6fc83dcee92d%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-14.png?alt=media\&token=37658e58-a775-4d64-b12c-5961344bab3b) Then click in the newly added app: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-7de69c6cf358a9c02970dfe9a35f4c4944e67a09%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-15.png?alt=media\&token=8ba020dd-4765-46c3-9976-90cddea3d0af) Now click on **Assign to People:** ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-4179a98c87d43dcfad6c9cebe6821ffcfec79e4f%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-16.png?alt=media\&token=a0d747cf-c3b9-405e-85e7-c6778a085ac7) Select the people you want to be pushed to ThousandEyes as users by clicking on the **Assign** button next to them: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-d97557649a4c6e63170dbfa48651538ac1fe903d%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-17.png?alt=media\&token=38ee51ed-a1e6-452d-ad60-b2711283014a) Then click on **Save and Go Back** after reviewing the user information: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-d6711ec83b029bc03eb3f4c4abdd355f3dae8fd4%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-18.png?alt=media\&token=9c10264d-b9ce-4b4c-8fb2-e77f708ae6d8) Repeat this for all users you want to push to ThousandEyes. When done, click on **Done**: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-b3dadd633acf8604f971780bbbe638dec52cafed%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-19.png?alt=media\&token=c5cde3c3-d347-4538-918c-d9ec4be51cbe) If the User ID (email) is already registered with ThousandEyes, then the new access, permissions and roles will be configured to the ThousandEyes Regular User role: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-e0baed975480e9841c36a1b451ad6f596e0ca523%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-20.png?alt=media\&token=067a14e7-bbb4-489c-a2e4-643505d9fc32) If the user doesn’t exist, it will be created in ThousandEyes and no registration or activation will be required from the newly created user. Within ThousandEyes, the user should be visible shortly after it was associated with the service from Okta. To validate this, go to the **Users** screen within **Manage > Account Settings > Users and Roles** and verify the newly added user is present there: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-f3d5582879bf0988a5bb856d86923e0285f18a6f%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-21.png?alt=media\&token=eb254713-6e03-49e3-acb2-672e3f9fa8a0) ### Removing Users To delete a user, open the Application from Okta, From the home page, go to Applications > Applications ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-4bf0c3962490c7f9f3532c0f538c6fc83dcee92d%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-14.png?alt=media\&token=37658e58-a775-4d64-b12c-5961344bab3b) Then click in the newly added app: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-7de69c6cf358a9c02970dfe9a35f4c4944e67a09%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-15.png?alt=media\&token=8ba020dd-4765-46c3-9976-90cddea3d0af) Now click on the “X” button next to the user you want to delete: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-e640d6ce879b9d4d45f01b491d802a62d5305de8%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-24.png?alt=media\&token=31698bb5-74e9-4b8e-933b-e1e7085aac41) Confirm the prompt to verify that the user will be unassigned from the Application: ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-bd4b8326068173b99c6b26e5eb56106ff9067f0d%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-25.png?alt=media\&token=a1f0c017-0826-4070-8e86-e545aa8a39e4) The user should be shortly deleted from ThousandEyes. This is also verifiable on the **Users** screen within **Manage > Account Settings > Users and Roles**. ![](https://1112912342-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M4QARF6s57qxMrOHDTZ%2Fuploads%2Fgit-blob-8f6abb5ed20d954750995ab78c9241450a0df48f%2Fproduct-documentation_user-management_how-to-configure-scim-with-okta-26.png?alt=media\&token=cd98757a-0b24-40a7-a8d3-91df62328854)