Configure SCIM in Workato

After enabling SCIM for your workspace, you can see the SCIM Provisioning option in the Workspace Settings interface. Follow these steps to configure SCIM 2.0 in Workato.

---

Prerequisites

• Your organization must have the Data Monitoring/Advanced Security & Compliance add-on.

---

1

Log in to Workato.

2

Navigate to Workspace admin > Settings > Authentication & provisioning.

SCIM provisioning

3

In the SCIM provisioning interface, click Generate SCIM Credentials to generate the SCIM token.

Generate SCIM token

4

Notice that the SCIM provisioning interface now contains the Base URL and the SCIM token.

Base URL

The base URL of our SCIM API endpoint.

In this example, the base URL is https://workato.com/scim/v2.

SCIM token

The security token for setting up automatic sync between your identity provider and Workato.

The SCIM token is obscured.

5

Copy both the Base URL and the SCIM token values for later use when you setup your identity provider.

Supply Base URL and SCIM token from Workato

6

After configuring SCIM 2.0 in Workato, proceed to configure and use it on your identity provider:

• Configure SCIM 2.0 in Okta
• Configure SCIM 2.0 in OneLogin
• Configure SCIM 2.0 in Azure Active Directory

Disabling SCIM

If you are a workspace owner, you can disable SCIM.

This process is very simple. When you refresh the SCIM token, it invalidates the previous token. Your SCIM configuration is no longer valid.

1

In Workato, navigate to Workspace admin > Settings > Authentication & provisioning > SCIM Provisioning.

2

Click Refresh Token.

Alternatively, see how to disable SCIM in Okta, OneLogin, or Azure AD.