Skip to main content
This guide walks you through configuring SCIM provisioning for the Brellium application published in the Okta Integration Network (OIN). Express Configuration automates the setup of Brellium’s SCIM endpoint, enabling you to manage user lifecycle operations from Okta.

Prerequisites

Before you configure SCIM provisioning, ensure you have:
  • Administrator access to your Okta tenant
  • A Brellium account with the can edit sso settings permission, with SSO and SCIM turned on for your organization (see Access the Brellium setup portal)
  • The Brellium app added to your Okta org from the OIN catalog
  • SSO configured for Brellium (see the SSO Configuration for Okta guide)

Access the Brellium setup portal

IT administrators can open the SSO and SCIM setup portal on their own. In Brellium, go to Control Center > Settings. The Single sign-on and Directory sync (SCIM) sections each have an Edit configuration button. Each button opens the setup portal for that connection in a new tab, so you can configure and change settings without a support ticket.
Brellium Team Settings page showing the Single sign-on connection with its Client ID, the Directory sync (SCIM) section, and an Edit configuration button for each

Brellium Control Center > Settings — the Single sign-on and Directory sync (SCIM) sections

Before you can use the setup portal, make sure that:
  1. SSO and SCIM are turned on for your organization. If you do not see the Single sign-on and Directory sync (SCIM) sections on the settings page, contact your customer success manager to turn on the feature for your organization. You can open the SSO and SCIM configuration only after the feature is on.
  2. You have the can edit sso settings permission. Your Brellium account must have the can edit sso settings permission under Settings. The can edit org settings permission does not give access to SSO and SCIM. If you do not have the permission, ask a Brellium administrator in your organization to give it to you.
Brellium Settings permissions: can view page, can edit org settings, and can edit sso settings

The can edit sso settings permission under Settings

Supported features

The Brellium SCIM integration supports the following provisioning features: For more information on these features, visit the Okta Glossary.

Supported profile attributes

The following SCIM attributes are supported for user provisioning between Okta and Brellium:

Core attributes

Enterprise User extension attributes

The following attributes use the urn:ietf:params:scim:schemas:extension:enterprise:2.0:User schema namespace.
The SCIM userName attribute in Brellium follows an email address format. You must select Email for the Application username format on the Sign On tab in Okta to ensure usernames are correctly mapped. For detailed instructions, see the Set the Application username format step in the SSO Configuration guide.
Since all of the attributes listed above are standard SCIM attributes, Okta provides default mappings for them. You do not need to manually configure attribute mappings in most cases.

Express Configuration steps for provisioning

1

Configure SCIM with Express Configuration

  1. In the Brellium app instance in your Okta org, go to the Provisioning tab.
  2. Click Express Configure SCIM in the Express Configuration for Brellium section. You are redirected to the Brellium sign-in page.
  3. Sign in to Brellium using your admin credentials.
  4. On the consent page, review the Authorize App details to grant Okta access to Brellium’s SCIM endpoint, then click Accept.
You are automatically redirected back to your Okta org. A success message confirms that SCIM provisioning has been configured.
Provisioning tab showing the Express Configure SCIM button

Express Configure SCIM button on the Provisioning tab

2

Enable provisioning features

  1. In the Provisioning tab, click To App under Settings.
  2. Click Edit.
  3. Enable the following options:
    • Create Users
    • Update User Attributes
    • Deactivate Users
  4. Click Save.
Okta profile attribute mappings for Brellium SCIM provisioning

SCIM profile attribute mappings in Okta

3

Set the Application username format

  1. In the Brellium app instance, click the Sign On tab.
  2. Under Credentials Details, set the Application username format to Email.
  3. Click Save.
4

Assign users

  1. Go to the Assignments tab.
  2. Click Assign > Assign to People (or Assign to Groups).
  3. Select the users or groups to assign and click Assign.
  4. Review the user attribute mappings and click Save and Go Back.
  5. Click Done.
Okta provisions the assigned users to Brellium.
5

Verify provisioning

  1. Assign the Brellium app to a test user in Okta.
  2. In Brellium, verify that the test user account was created with the correct profile attributes.
  3. Update the test user’s profile in Okta (for example, change the job title or department).
  4. Verify that the profile update is synced to Brellium.
  5. Unassign the test user from the Brellium app in Okta.
  6. Verify that the user is deactivated in Brellium.

Troubleshoot

N/A

Support

If you have questions or encounter issues not covered in this guide, contact the Brellium support team: