Configuring SCIM Connector Settings
To configure SCIM settings do the following:
-
Open SCIM Connector.
-
The home page displays.
-
Enter the Secret Server URL, Username, and Password and click Sign in.
-
Select Settings and enter the Secret Server application account details.
-
Select Save to check the connection.
-
Select SCIM Connector Endpoints.
-
Select Add Endpoint and enter the details.
Don't select Is api based integration. It should only be selected when a third-party application doesn't have a provision to add the SCIM token.
-
Select Generate Token and Save.
Add the Source in SailPoint
-
Go to the SailPoint URL and log in with Admin credentials.
-
The SailPoint homepage opens.
-
Select the Admin tab.
-
Navigate to Connections > Sources and click New.
-
The Create New Source dialog box opens.
-
Select the Source Type as SCIM 2.0.
-
Enter a Source Name.
-
Enter a Description.
-
In Source Owner enter the name of an owner.
-
Under Connection Type, select Direct Connection.
-
Select Continue.
-
In the Virtual Appliance Cluster, select the virtual appliance cluster that will be used as the application connector for the source and click Save.
For details refer to Getting Started in IdentityNow.
-
Select the Connection Setting option.
-
Enter the Delinea SCIM URL in the Host URL field and select API Token and enter the Non-expiring token option generated by the SCIM connector, and select Save.
For details refer to SCIM Connector Endpoint Information.
-
Select Review and Test and Test Connection.
-
The Test Success! pop-up displays. Select Exit Configuration.
Configure IdentityNow for Provisioning
-
Open the Source previously created.
-
Go to Import Data > Test Connection.
-
The Connected button highlights.
-
Go to Account Schema.
-
Select Discover Schema.
-
It will take a few minutes for the available schemas to load. Once completed, the list will display.
-
In the Account ID field select id and in the Account Name field select userName and click Save Schema.
Configure IdentityNow for Provisioning
-
From the menu, go to Identities > Identity Profiles.
-
Select +New to create a profile.
-
In the Name field enter the name and select the Account Source. Click OK to save.
-
Open the recently created Identity Profile.
-
Select Mapping and select the proper Attribute against the Source.
-
Once the Attributes are assigned, click Save and then Update. It will take a few minutes for the identity to update.
-
Go to Source and select Account Aggregation.
-
Select Start to sync the users from the Secret Server.
-
Once Aggregation is complete, the status is displayed under the Aggregation Activity Log.
-
Select Accounts to verify the Secret Server user.
-
Users are also added to the Identity List. To verify, go to Identities > Identity List.
-
A list of users added from the Secret Server will display.
-
Permissions can be added to the selected user from the list.
-
To verify the Groups from Secret Server, go to Import Data > Entitlement Aggregations.
-
Select Start to begin the aggregation. The status will display in the Activity Log.
-
Select Entitlements to verify that the groups are synced in SailPoint.
