> ## Documentation Index
> Fetch the complete documentation index at: https://dub.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuring SCIM Directory Sync with Okta

> For Dub Enterprise users, you can automatically provision and deprovision users from your Okta directory to Dub using SCIM Directory Sync.

> [!TIP]
>
> This feature is only available on [Dub Enterprise](https://dub.co/enterprise).

For Dub Enterprise users, you can automatically provision and deprovision users from your Okta directory to Dub using [SCIM Directory Sync](https://developer.okta.com/docs/concepts/scim/).

## Step 1: Configure Directory Sync on Dub

In your workspace settings, click on **Security** in the **Workspace** group.

![Directory Sync section on the Dub Dashboard](https://assets.dub.co/cms/scim-directory-sync-2.png)

Under the **Directory Sync** section, click on **Configure**. This will open up the Directory Sync modal:

1. Select **Okta** as the Directory Provider.
2. Click **Save changes**.

![SCIM Modal](https://assets.dub.co/help/okta-scim-modal.png)

This will generate a Directory Sync connection for your Dub workspace, and return 2 values, which will be needed in Step 2:

1. **SCIM 2.0 Base URL**
2. **OAuth Bearer Token**

![SCIM Modal Configured](https://assets.dub.co/help/okta-scim-modal-configured.png)

## Step 2: Add Provisioning to SAML Application

Go to the **General** tab of your existing Dub Okta SAML application that you want to enable SCIM provisioning for. Under **App Settings** click **Edit**.

![General tab of Okta SAML application](https://assets.dub.co/help/okta-scim-general.png)

Select the "Enable SCIM provisioning" option and click **Save**.

![Enable SCIM provisioning](https://assets.dub.co/help/okta-scim-enable.png)

You should now see a **Provisioning** tab. Select it and click **Edit**.

![Provisioning tab of Okta SAML application](https://assets.dub.co/help/okta-scim-provisioning.png)

1. Under the **SCIM connector base URL** field, enter the **SCIM 2.0 Base URL** value from Step 1.

2. Under **Unique identifier field for users**, enter `userName`.

```text title="Copy this unique identifier" theme={null}
userName
```

3. Under **Supported provisioning actions**, select the following options:

* Push New Users
* Push Profile Updates
* Push groups

4. Under **Authentication Mode**, select **HTTP Header**.

5. Copy & paste the **OAuth Bearer Token** value from Step 1 into the **Authorization** field.

![Configure SCIM provisioning](https://assets.dub.co/help/okta-scim-connection.png)

Click "Test Connector Configuration" to verify that the connection is working, and then click "Save".

## Step 3: Configure Provisioning Actions

Under the **To App** section, click **Edit**.

Check the following options, and click **Save**:

* Create Users
* Update User Attributes
* Deactivate Users

![SCIM Provisioning Actions](https://assets.dub.co/help/okta-scim-actions.png)

## Step 4: Assign Users

Once you've configured Directory sync, you can assign users to Dub directly within Okta.

Click on the **Assignments** tab, and click **Assign**. You can choose to assign users individually, or assign them in bulk by group.

![Assigning users in Okta](https://assets.dub.co/help/okta-saml-assign.png)

Select the users or groups you want to assign and click **Assign**.

![Assigning users in Okta choose users](https://assets.dub.co/help/okta-saml-choose.png)

In the next screen, scroll to the bottom and click **Save and Go Back**.

![Saving Okta assignment](https://assets.dub.co/help/okta-saml-save.png)

Your assigned users should now receive an invitation email to join your Dub workspace.

![SAML invite email](https://assets.dub.co/help/saml-invite.png)

They will also be able to sign in to Dub using Okta SSO.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.