Quilzomanual

SCIM provisioning from Okta and Entra

People kept in step by the identity provider, including when they leave.

In the adminProvisioning

The Provisioning screen
SCIM provisioning.

  1. Issue the SCIM token

    quilzo scim token

    Give the identity provider the SCIM address and this token.

  2. Say what each group means

    quilzo scim map Editors author
quilzo scim map Security analyst
quilzo scim map "Lab technicians" lab-samples/technician

    A group means a role, a permission, a job, or a role an installed feature declares.

  3. Check it

    quilzo scim status

Only grants made by provisioning are ever changed by it; access granted by hand is left alone. Deactivation suspends a person at once: their sessions, tokens and connected apps stop, and agents they sponsor stop. Deletion also erases what agents remember about them.