Okta SCIM integration

Set up Okta SCIM integration to automatically provision and sync employee data from Okta to your application through UAPI.

Unlike other HRIS integrations that rely on polling, Okta SCIM uses a push-based model. Okta pushes user provisioning events (create, update) to UAPI via SCIM, and UAPI delivers them to your webhook endpoints in real time. This means you need to set up a webhook before configuring the connection.

Step 1: Create a webhook for HRIS

Before setting up the Okta SCIM connection, create a webhook to receive employee provisioning events:

1. Navigate to the UAPI Portal

2. Go to the Webhooks section

3. Create a new webhook subscription for HRIS

4. Set the delivery URL:

   • For production — use your own endpoint that will receive webhook events
   • For testing — generate a temporary URL using Webhook.site to inspect incoming webhook payloads in real time

5. Save the webhook

   

Step 2: Create a consumer

Create a consumer by following the Consumers guide.

Step 3: Set up the Okta SCIM connection

1. Open the consumer created in the previous step

2. Select the Available tab

3. Find the Okta SCIM connection and open it

4. Take note of the connection metadata, which contains:

   • Base URL - the SCIM endpoint URL that you will configure in Okta
   • API Token - the bearer token Okta will use to authenticate SCIM requests

5. Keep this information handy - you will need it in the next step

   

Step 4: Create a SCIM application in Okta

1. Go to your Okta admin console
2. Create a SCIM provisioning application following the SCIM Application guide
3. When configuring the SCIM connection in Okta, use the Base URL and API Token from the connection metadata obtained in the previous step

Step 5: Verify webhook delivery

1. After assigning users to the SCIM application in Okta, provisioning events will be pushed to UAPI
2. Open your webhook delivery URL (e.g., your test webhook site from above)
3. Verify that webhook events are appearing - you should see employee.created or employee.updated events as Okta provisions users

Step 6: Make your first API call

1. Open the API Explorer
2. Fetch all employees or a single employee - the data reflects the users provisioned through Okta SCIM

Follow the API Explorer guide for detailed instructions on using the explorer.

Congratulations — you've successfully set up Okta SCIM integration! 🎉