Configure SCIM with Okta

Postman supports SCIM provisioning through Okta with the Postman Okta app, enabling you to automate user provisioning and de-provisioning for your team. Postman also supports SCIM provisioning through Okta with the SCIM 2.0 test app (Header Auth), enabling you to also update group information from Postman to your identity provider (IdP).

You must be a Postman Team Admin to enable SCIM for your team. With SCIM enabled, users won't have the option to leave your team on their own, and won't be able to change their account email or password. Only Team Admins will have the right to remove team members.

Enable SCIM in Okta with the Postman Okta app

Postman is available as an app in the Okta Integration Network, allowing you to enable user provisioning directly through Okta.

Updating group information from Postman to your IdP isn't supported in the Postman Okta app. If you want to use this provisioning feature, use the SCIM 2.0 test app (Header Auth).

Prior to enabling SCIM in Okta, you must add the Postman app in Okta and configure Okta's SSO for your Postman team.

To set up provisioning with Okta, do the following:

1. Enable SCIM in Postman and generate a SCIM API key.

2. In Okta, go to the Postman app, select Provisioning, then select Configure API Integration.

   

3. Select Enable API integration and enter your SCIM API key as the API Token.

   

4. Select Test API Credentials. If successful, a verification message will appear.

   If verification is unsuccessful, confirm that you have SCIM enabled for your team in Postman, are using the correct SCIM API key, and that your API key's status is ACTIVE in your team authentication settings. If you continue to face issues, contact Postman support for assistance.

5. Select Save. Then you can configure the Postman Okta app.

Configure the Postman Okta app

After you enable SCIM in Okta with the Postman Okta app, you can configure the app. The Postman Okta app supports the provisioning features listed in the SCIM provisioning overview.

To turn these features on or off, do the following:

1. Go to the Postman app in Okta, select To App on the left, then select Edit.

   

2. Select features to enable them, or clear to turn them off.

   

3. Select Save to save your changes.

Enable SCIM in Okta with the SCIM test app

The SCIM 2.0 test app (Header Auth) is available in the Okta Integration Network, allowing you to enable user provisioning directly through Okta.

Use the SCIM 2.0 test app (Header Auth) if you need support for updating group information from Postman to your IdP. If you don't need this provisioning feature, use the Postman Okta app.

Prior to enabling SCIM in Okta, you must configure Okta's SSO for your Postman team.

To set up provisioning with Okta, do the following:

1. Enable SCIM in Postman and generate a SCIM API key.

2. Open your Okta admin console in a new tab.

3. Go to Applications, and then select Applications.

4. Select Browse App Catalog.

   

5. Search for "SCIM 2.0 Test App (Header Auth)". Select the app from the results, and then select Add Integration.

   

6. In the General Settings tab, enter an app name you'll recognize later, and then select Next.

7. In the Sign-On Options tab, select Done.

8. In Okta, go to the SCIM 2.0 test app (Header Auth), select Provisioning, then select Configure API Integration.

   

9. Select Enable API integration, and enter the following:

   • Base URL - Enter https://api.getpostman.com/scim/v2/.
   • API Token - Enter your SCIM API key.
   

10. Select Test API Credentials. If successful, a verification message will appear.

    If verification is unsuccessful, confirm that you have SCIM enabled for your team in Postman, are using the correct SCIM API key, and that your API key's status is ACTIVE in your team authentication settings. If you continue to face issues, contact Postman support for assistance.

11. Select Save. Then you can configure the SCIM 2.0 test app (Header Auth).

Configure the SCIM test app

After you enable SCIM in Okta with the SCIM 2.0 test app (Header Auth), you can configure the app. The SCIM 2.0 test app (Header Auth) supports the provisioning features listed in the SCIM provisioning overview. The app also supports updating group information from Postman to your IdP.

To turn these features on or off, do the following:

1. Go to the SCIM 2.0 test app (Header Auth) in Okta, select Provisioning, select To App on the left, then select Edit.

   

2. Select features to enable them, or clear to turn them off. Postman supports the Create users, Update User Attributes, and Deactivate Users features. Postman doesn't support the Sync Password feature.

   

3. Select Save to save your changes.

4. Make sure only the Username, Given name, and Family name attributes are mapped. Delete other attributes if they're mapped.

   

5. Select Assignments, then assign relevant people and groups to the app. Learn how to assign people and groups to an app in Okta.