SCIM Integration

Set up and use the system for cross-domain identity management (SCIM) integration for Spot in Okta. SCIM integration lets you automate user provisioning, updates, and deactivation.

You can manage user lifecycle events between Okta and Spot seamlessly. This automation helps maintain accurate user data and reduces administrative overhead.

Prerequisites

• Admin access to your Okta organization.
• Admin access to your Spot organization.
• A permanent access token.

Step 1: Add Spot to Okta

1. Sign in to your Okta admin dashboard.

2. Go to Applications > Add Application.

3. Search for Spotinst and click Add Integration.

   View image

   

Step 2: Configure Spot

1. After adding the application, go to Provisioning > Configure API Integration.

2. Select Enable API Integration.

3. Enter the permanent access token from Spot.

4. Click Test API Credentials to make sure it’s working and then click Save.

   View image

   

Step 3: Enable SCIM Provisioning Features

1. On the Provisioning tab, turn these on:

   • Create Users lets Okta create users in Spot.
   • Deactivate Users lets Okta deactivate users in Spot.

2. Click Save.

Step 4: Assign Users to the Spot App

1. Go to the Assignments tab.

2. Click Assign > Assign to People.

3. Select the users to provision in Spot:

   • Viewer role assigns the user a viewer policy for each account in the organization.
   • Editor role assigns the user as an organization admin.

4. Click Assign.

   View image

   

Step 5: Verify User Provisioning

1. In the Spot console, click the user icon > Settings.

2. Go to Organization > Users.

3. Verify that the users assigned in Okta are showing correctly in Spot.

   View image

   

Troubleshooting

• API Credentials Error: Make sure that the SCIM API credentials are correct and have the necessary permissions.
• User Provisioning Issues: Check the Okta logs for any errors related to user provisioning. Make sure that the users have the required attributes filled out in Okta.