Configuring Provisioning for Oak Engage

Prerequisites

In order to follow this guide, you must have an administrator account within your Oak site, and be able to manage applications within Okta.

Supported features

  • Create users
  • Update user attributes
  • Deactivate users
  • Group push

For more information on the listed features, visit the Okta Glossary.

Configuration steps

  1. Login to your Oak Engage site as an administrator, then navigate to the provisioning settings page (Primary Menu > Configure > Site Settings > Integrations > Provisioning)

    Note: If Provisioning has not been enabled on your Oak Engage site, please contact your account manager or the support team for assistance.

  2. Click on the add button to add a new SCIM connection.
  3. Enter a name for the provisioning connection, and click next.
  4. Note the SCIM Endpoint and Authentication Token fields, taking a copy of them for the next steps.
  5. In a different browser tab, log into your Okta application management. Navigate to the Oak Engage application, click on the Provisioning tab, then follow the instructions below;
    1. Click on the Configure API Integration button.
    2. Check the Enable API Integration checkbox.
    3. In the Base URL field, enter the SCIM Endpoint URL from the Oak settings page.
    4. In the API Token field, enter the Authentication Token value. For example:
      54aa6e81-63ae-4c4b-a69f-0577dad1c85c
    5. Click Test API Credentials to ensure that the connection is working properly, then click Save.

Note

Oak Engage requires the office attribute to be set, but Okta does not have a natural field and therefore there is no default mapping.

Ensure that you review, and if required, customise the example expression for setting a default office. The example presumes that you have added a new custom field to your Okta profile called officeName, but it can be any property that logically contains a user’s physical location by name.

(user.officeName != null && user.officeName != ”) ? user.officeName : ‘Default Office’

Review the remaining field mappings to ensure that they make sense for your Okta profiles.

Troubleshoot

If you receive any errors during SCIM provisioning or need any assistance with configuration, contact your Oak Engage account manager, or our support team who will be happy to help.