Skip to main content

Provisioning Users Automatically

Files.com supports two methods for automatically provisioning users via Okta: SCIM and Just-In-Time (JIT). For SCIM, configure the Okta SAML integration so Okta manages both sign-in and the ongoing user lifecycle. Files.com supports SCIM only alongside SAML-based SSO.

SCIM Provisioning

SCIM Provisioning automatically provisions your users in Files.com from Okta.

Select the SCIM provisioning method in Okta at Applications -> Files.com -> App Settings -> Provisioning.

Then use the following settings in Okta at Applications -> Files.com -> Provisioning -> SCIM Connection:

FieldValue
SCIM connector base URLhttps://app.files.com/api/scim
Unique identifier field for usersemail
Supported provisioning actionsCheck all applicable actions
Authentication ModeBasic Auth or HTTP Header

If Authentication Mode is set to Basic Auth, generate the Basic Auth username and password in Files.com under the advanced settings in the Add/Edit SSO provider form. Under the Enable automatic user provisioning via SCIM? section, select Basic, then click Generate SCIM Username and Password. Copy both values and enter them in Okta for SCIM provisioning. The credentials only become active after saving the Add/Edit SSO provider form.

If Authentication Mode is set to HTTP Header, generate the bearer token by selecting Token in the same section, then click Save to generate the token. Copy the token and enter it in Okta for SCIM provisioning setup.

In Okta at Applications -> Files.com -> Provisioning -> To App, ensure that Create Users, Update User Attributes, and Deactivate Users are checked.

Assign the users or an application-assignment group to the Files.com application in Okta. Okta provisions the assigned users to Files.com, where they can log in via SSO.

Files.com offers numerous configuration options for SCIM provisioning, detailed in the Configuration Options section under our SCIM provisioning documentation.

Group Provisioning

Application assignment gives users access to the Files.com application and provisions their accounts. Group Push creates the corresponding groups in Files.com and maintains their membership, so you can grant folder access to a group instead of configuring each user separately.

Use separate Okta groups for application assignment and Group Push. The same users can belong to both, but Okta does not support using one group for both purposes. Before pushing a group, confirm that its members are active, assigned to the Files.com application, and already provisioned in Files.com. Separate groups do not replace this prerequisite. See Okta's application-assignment and Group Push guidanceExternal LinkThis link leads to an external website and will open in a new tab and Group Push prerequisitesExternal LinkThis link leads to an external website and will open in a new tab.

In the Files.com application's Push Groups tab in Okta, select the groups to provision by name or by rule, following Okta's Group Push setupExternal LinkThis link leads to an external website and will open in a new tab. Manage pushed groups and their membership in Okta so subsequent provisioning updates remain consistent with the source directory.

Just-In-Time (JIT) Provisioning

JIT Provisioning generates user records on Files.com upon their first successful login. This method is simpler than SCIM, but it has limitations. JIT can provision users but cannot delete or disable them. Files.com automatically uses Just-In-Time (JIT) Provisioning if you don't set up SCIM.