Skip to main content

SCIM Setup Guide for Okta (For IT Admin of Enterprises Using Okta)

Updated over a month ago

SCIM (System for Cross-domain Identity Management) is a standard protocol used to automate the exchange of user identity information between an organization’s directory and connected applications. With SCIM enabled, user accounts in Brief AI can be automatically created, updated, and deactivated in sync with your Okta directory, ensuring consistent identity lifecycle management.

Setting up SCIM provisioning for your organization requires coordination with the Brief AI support team so we can provide your SCIM Base URL and API Token.


If your organization would like to enable SCIM-based user provisioning, please reach out to Brief AI Support.

For segregated environments, a dedicated SCIM endpoint is provided for your organization, e.g.:

https://<your-org>.wiseworks.ai/api/scim/<org_identifier>

This endpoint will be used by Okta to send provisioning events to your Brief AI instance.


SCIM Setup in Okta

Before you begin, ensure you have received the following from Brief AI:

  • SCIM Base URL

  • SCIM API Token

These values are required to complete the setup.

1. Add the Okta SCIM Integration

  1. In the Okta Admin Console, navigate to: Applications → Applications → Browse App Catalog

  2. Search for: “SCIM 2.0 Test App (Header Auth)”

  3. Click Add Integration.

  4. Provide an application name, e.g. Brief AI SCIM.

  5. Under Sign-On Options, choose: SWA – Secure Web Authentication

  6. Click Done and you will be redirected to the created application.


2. Configure SCIM Provisioning

  1. Open the newly created application.

  2. Navigate to the Provisioning tab.

  3. Click Configure API Integration.

  4. Check Enable API Integration.

  5. Enter the following values provided by Brief AI:

    • SCIM Base URL

    • API Token

  6. Click Test API Credentials.

    You should see Success if the connection works properly.

  7. Click Save


3. Enable SCIM Features

Still under the Provisioning tab, scroll to Provisioning to App and enable:

  • Create Users

  • Update User Attributes

  • Deactivate Users

Leave all other settings at their default values.

Click Save.


4. Add Required Brief AI Attributes (Role & Organization)

Brief AI requires two custom SCIM attributes for each provisioned user:

  • role - the user’s role inside Brief AI

  • organization - the Brief AI organisation identifier

These must be added in Okta before assigning users.

  1. Go to Directory → Profile Editor

  2. Open the profile for your Brief AI SCIM application

  3. Click Add Attribute

  4. Add the following two attributes - Brief will provide the attribute Value for the organization

Attribute: Brief AI Role

Attribute: Organization

Click Save.

5. Assign Users to the Brief AI SCIM Application

SCIM provisioning only occurs for assigned users. Once a user is assigned:

  • Okta will create the user in Brief AI

  • Updates to user attributes will synchronize

  • Removing the assignment deactivates the user in Brief AI

In addition to standard user information, Brief AI requires two custom attributes for SCIM set in the previous set:

  • Brief AI Role (role)

  • Organization (organizationIdentifier)

These fields will appear once set in the Profile Editor.

To assign a user:

  1. Within the application, navigate to the Assignments tab.

  2. Click Assign → Assign to People.

  3. Select a user

  4. Complete any required fields such as email, name etc

    Ensure you fill out the Brief AI role and organization

  5. Click Save and Go Back, then Done.


6. Testing SCIM Provisioning

Once assigned, SCIM will automatically sync the user to Brief AI. You can verify:

  • The user appears under Users in Brief AI

  • Editing their profile in Okta updates the user in Brief AI

  • Unassigning the user deactivates them in Brief AI

Did this answer your question?