SCIM

Managing Members

In the Members section, you can manage organization-wide settings for adding members. Options include automatically inviting members to Dashworks or using a signup link for invitations.

You can manually invite users by entering their email addresses in the invite modal and monitor if they have accepted your invitation.

You can also view who from your organization has not been invited, and who is blocked from accessing Dashworks.

Here's a quick video that reviews how to manage members and sync your directory:

Directory Sync

When you sync your company directory, new users will be automatically added to Dashworks upon joining your organization. This means Dashworks is one less tool you must remember to provide access to for new hires - they will have access as soon as they are added to your directory.

Remember to enable the “Automatically Invite Team Members” option in the Admin Settings. This ensures that all team members can access Dashworks as long as they are active in your organization.

Moreover, you can easily manage your directory within Dashworks. Regularly reviewing your 'Invited' users will reveal those who have been invited but have not yet activated their Dashworks subscription. A recommended practice is to select "Resend invite" for these users, accompanied by a personal message from you as an Admin. This way, these users are notified of their invitation and can start using Dashworks immediately.

SCIM Setup

Okta

For provisioning and deprovisioning users automatically, Dashworks supports a SCIM integration with Okta.

Requirements

1. Set up Okta SSO with Dashworks following the instructions at SSO.

2. Reach out to [e-mail] for the SCIM base URL and OAuth Bearer Token for your organization.

Step-by-Step Configuration Instructions

1. Log into your Okta Admin account and add Dashworks app from the Application Catalog. The Dashworks app may already be present if Okta SSO is set up for your organization.

2. In the Application, click on Provisioning tab and then click the Configure API integration.

3. Fill in the details for SCIM base URL and OAuth Bearer Token and click on Test API Credentials and click save.

1. In the Provisioning To App Settings, enable the following:

   • Create Users

   • Update User Attributes

   • Deactivate Users

   and click Save.

2. For newly created app, Click on Assignments tab in the Application and assign users to your application. In order to assign groups to sync group memberships, navigate to Push Groups tab, from the "Push Groups" dropdown, select: "Find Groups by Name". Search for the group you'd like to push and select it. Make sure the box is checked for "Push Immediately" and click "Save".

1. (Optional) If you have already have an app with assigned users before adding the provisioning feature, you can re-provision users by clicking on the Provision User option in the Assignments tab and then click OK to provision all users.

Application username format

Please select Email for the Application Username form.

Azure (Entra ID)

For provisioning and deprovisioning users automatically, Dashworks supports a SCIM integration with Entra ID (formerly Azure AD).

Requirements

1. Set up Azure SSO with Dashworks following the instructions at Azure AD
2. Reach out to [e-mail] for the SCIM base URL and OAuth Bearer Token for your organization.

Configure your integration

1. Sign in to the Entra ID Admin Center Dashboard. Select “Enterprise applications” from the list of Azure services.

1. Click "New Application".

1. Select “Create your own application” and continue.

1. Give your application a descriptive name (such as "Dashworks-SCIM"), and select the “Integrate any other application you don’t find in the gallery (Non-gallery)” option, then click “Create”.

1. Select “Provisioning” from the “Manage” section found in the navigation menu.

1. Click the “Get Started” button.

1. Select the “Automatic” Provisioning Mode from the dropdown menu.

2. In the “Admin Credentials” section, copy and paste the Endpoint you recieved from [e-mail] in the “Tenant URL” field.

3. Then, copy and paste the Bearer Token you recieved from [e-mail] into the Secret Token field.

4. Click “Test Connection” to receive confirmation that your connection has been set up correctly. Then, select “Save” to persist the credentials.

Set and enable Attribute mappings

1. Expand the “Mappings” section.

1. Make sure the group and user attribute mappings are enabled, and are mapping the correct fields. The default mapping should work, but your specific Azure setup may require you to add a custom mapping.

1. Make sure that you are mapping objectId to externalId within the Attribute Mapping section.

1. Make sure that the following attributes are mapped:

   1. username

   2. displayName

   3. jobTitle

   4. mail

   5. givenName

   6. surname

   7. objectId

   8. employeeId

   9. department

   10. manager

Assign users and groups to your application

1. In order for your users and groups to be synced, you will need to assign them to your Entra ID SCIM Application. Select “Users and groups” from the “Manage” section of the navigation menu.

1. Select “Add user/group” from the top menu.

1. Select “None selected” under the “Users and Groups”. In the menu, select the users and groups that you want to add to the SCIM application, and click “Select”.

1. Select “Assign” to add the selected users and groups to your SCIM application.

Turn on provisioning for your SCIM application

1. In the Provisioning menu, confirm the “Provisioning Status” is set to “On” and that the “Scope” is set to “Sync only assigned users and groups”.

Once you begin provisioning users and groups, changes will reflect in Dashworks Members page within 60 minutes.