Provisioning Users Automatically
Files.com supports two methods for automatically provisioning users via Okta: SCIM and Just-In-Time (JIT). SCIM provisioning is only compatible with SAML-based integration, not OAuth or OpenID Connect. For SAML setup, see the Okta SSO page.
SCIM Provisioning
SCIM Provisioning automatically provisions your users in Files.com from Okta.
Select the SCIM provisioning method in Okta at Applications -> Files.com -> App Settings -> Provisioning.
Then use the following settings in Okta at Applications -> Files.com -> Provisioning -> SCIM Connection:
| Field | Value |
|---|---|
| SCIM connector base URL | https://app.files.com/api/scim |
| Unique identifier field for users | |
| Supported provisioning actions | Check all applicable actions |
| Authentication Mode | Basic Auth or HTTP Header |
If Authentication Mode is set to Basic Auth, generate the Basic Auth username and password in Files.com under the advanced settings in the Add/Edit SSO provider form. Under the Enable automatic user provisioning via SCIM? section, select Basic, then click Generate SCIM Username and Password. Copy both values and enter them in Okta for SCIM provisioning. The credentials only become active after saving the Add/Edit SSO provider form.
If Authentication Mode is set to HTTP Header, generate the bearer token by selecting Token in the same section, then click Save to generate the token. Copy the token and enter it in Okta for SCIM provisioning setup.
In Okta at Applications -> Files.com -> Provisioning -> To App, ensure that Create Users, Update User Attributes, and Deactivate Users are checked.
After setting the above, Okta provisions those users to Files.com automatically, and they can log in via SSO.
Files.com offers numerous configuration options for SCIM provisioning, detailed in the Configuration Options section under our SCIM provisioning documentation.
Just-In-Time (JIT) Provisioning
JIT Provisioning generates user records on Files.com upon their first successful login. This method is simpler than SCIM, but it has limitations. JIT can provision users but cannot delete or disable them. Files.com automatically uses Just-In-Time (JIT) Provisioning if you don't set up SCIM.