Set Up Okta SCIM Provisioning for SparkToro

Last updated 1784073600

Set Up Okta SCIM Provisioning for SparkToro

SparkToro supports automated provisioning with SCIM 2.0. When SCIM is enabled, Okta creates, updates, and deactivates SparkToro users automatically as you assign and unassign them in Okta. This guide covers the SparkToro integration published in the Okta Integration Network (OIN).

SCIM requires Okta Lifecycle Management.

Prerequisites

Supported Features

  • Import New Users: Okta imports existing SparkToro users into Okta.
  • Import Profile Updates: Okta imports profile changes made in SparkToro.
  • Push New Users: assigning a user to the application in Okta creates that user in SparkToro.
  • Push Profile Updates: profile changes in Okta update the matching SparkToro user.
  • Deactivate Users: unassigning or deactivating a user in Okta deactivates them in SparkToro and frees the seat.

Supported user attributes are userName (email), first name, last name, primary email, and active status. SparkToro does not use any other profile attributes. Remove unused attribute mappings in the Okta profile editor so they are not sent.

Not supported:

  • Push Password / Sync Password
  • Group Push (see the Group Push section below)

Configuration Steps

  1. In SparkToro, go to Account > Settings > Single Sign-On and click Enable SCIM Provisioning. Copy the API Token that appears.
  2. In Okta, open the SparkToro application and go to the Provisioning tab.
  3. Click Configure API Integration and select Enable API integration.
  4. Paste the API Token from step 1 into the API Token field. The SCIM Base URL is pre-configured by Okta for this integration, so you will not see a Base URL field.
  5. Click Test API Credentials. You should see a success message.
  6. Click Save.
  7. Under Provisioning > To App, click Edit and enable Create Users, Update User Attributes, and Deactivate Users.
  8. On the Sign On tab, set the Application username format to Email. SparkToro's userName is an email address.
  9. Assign users or groups to the application. Okta provisions them to SparkToro automatically.

Group Push

SparkToro does not support Group Push. SparkToro does not create or manage groups through SCIM. To provision a user, assign them to the SparkToro application in Okta, either directly or through an Okta group. The user must be assigned to the application and, if you assign by group, be a member of that group in Okta for access to take effect in SparkToro. No group object is created in SparkToro.

Troubleshoot

  • "User account is inactive" when reassigning a user: SparkToro reactivates a previously deactivated user when you reassign them. Confirm the user is assigned and active in Okta, then retry.
  • Provisioning a new user fails with a seat-limit message: free a seat in SparkToro or upgrade the plan, then retry the assignment.
  • Username does not match: make sure Application username format is set to Email on the Sign On tab.

Support

Questions about provisioning? Email support@sparktoro.com.

Was this article helpful?

Still need help? Email support@sparktoro.com

← Back to the Help Center

Keep up with SparkToro®