Okta SCIM (Sync members)

Directory sync lets Okta manage who is on your Clakta team. When you assign someone to the Clakta app in Okta, Clakta invites them to the team. When you unassign or deactivate them, Clakta removes them. Directory sync is available on the Enterprise plan.

Set up SSO with Okta first: directory sync uses the same Okta app.

Create the connection in Clakta

1. Go to Team settings → Security and click Configure under Directory sync (SCIM).
2. Choose Okta and click Create connection.
3. Keep the dialog open: you'll copy the SCIM connector base URL and the Bearer token from it.

Turn on provisioning in Okta

1. Open the Clakta app in the Okta Admin Console.
2. In the General tab, click Edit under App Settings, set Provisioning to SCIM and click Save.
3. Open the Provisioning tab, click Edit and fill in:
   • SCIM connector base URL: the base URL from Clakta
   • Unique identifier field for users: userName
   • Supported provisioning actions: Push New Users and Push Profile Updates
   • Authentication Mode: HTTP Header
   • Authorization: the bearer token from Clakta
4. Click Test Connector Configuration, then Save.
5. Under Provisioning → To App, click Edit, turn on Create Users, Update User Attributes and Deactivate Users, and click Save.

What happens next

• People assigned to the app get an email inviting them to your Clakta team. With SSO on, they can also just sign in through SSO.
• People who are unassigned or deactivated are removed from the team.
• Team owners are never removed by directory sync. Remove them by hand in Members if needed.

Common questions