Setup SCIM Provisioning for Okta

This guide explains how to set up automated user and group provisioning from Okta to Symbol Security using SCIM 2.0.

Step 1: Initiate Setup in Symbol Security

  1. Log in to the Symbol Security App and navigate to Company Portal > Settings > General > SCIM Provisioning.
  2. Click Setup SCIM, select Okta, enter your Tenant ID, and click Generate Token (or Switch to SCIM if upgrading from legacy sync).
  3. Keep this tab open to copy credentials during Okta setup.

Step 2: Create App Integration in Okta

  1. Log in to your Okta Admin Console.
  2. In the left sidebar, navigate to Applications & Resources > Applications.
  3. Click Create App Integration.
  4. Select Okta Integration Wizard (or SAML 2.0 / Custom App with SCIM enabled).
  5. Enable Provisioning and select SCIM 2.0.

Step 3: Configure SCIM Integration Settings

General Settings

Fill in the form with the following details:

  • App Name: Symbol Security
  • Description: Automated SCIM 2.0 user and group synchronization for Symbol Security.
  • App Logo (Optional): Download and upload the 200x200 Symbol Security Logo.

Authentication Settings

Select and fill in the values retrieved from the Symbol Security App:

  • Authentication Mode: Select OAuth2 (recommended) or Bearer Token.
  • Grant Type (if OAuth2 selected): Choose Client Credentials.
  • Token Endpoint: Copy the Token Endpoint URL from the Symbol App and paste it into Okta.

Configure SCIM

  • Base URL: Copy the SCIM Endpoint URL from Symbol Security and paste it here.
  • Select the objects you want Okta to manage (Users, Groups).
  • Click Review and Deploy, then click Deploy changes.

Step 4: Configure Provisioning

  1. Go to the Provisioning tab in Okta and click Configure API Integration.

  2. Check Enable API Integration.

  3. From the Symbol App, copy and paste the following:

    • Client ID
    • Client Secret
  4. Click Test API Credentials.

  5. Once the test succeeds, click Save.

  6. Under To App settings, enable Create Users, Update User Attributes, and Deactivate Users.

Step 5: Attribute Mapping

Symbol Security automatically provides a default SCIM schema. Leave attribute mappings unchanged unless custom configurations are required.

⚠️ Warning: Symbol Security mandatorily requires the following 4 attributes for provisioning:

  • firstName
  • lastName
  • email
  • title

Without these mandatory fields, provisioning tasks will fail.