How to setup SCIM for OneLogin

Requirements

• Be able to create a new company apps

See guide on how to setup SCIM with Azure Active Directory here.

Steps

• Inside OneLogin go to Apps and then from the dropdown select Company Apps afterwards click on Add App

• In the Find Applications page in the search bar type in SCIM then you should see multiple applications. Select SCIM Provisioner with SAML (SCIM v2) (this is because we are using SCIM 2.0).
  

• After setting up the app you will be redirected to it's main setting page. On the Configuration tab enter the SCIM Base Url the SCIM JSON Template and the Bearer Token obtained from Templafy
  

• The SCIM JSON Template looks like this:

{
    "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User",
        "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
    ],
    "userName": "{$user.username}",
    "externalId": "{$user.userprincipalname}",
    "name": {
        "givenName": "{$user.firstname}",
        "familyName": "{$user.lastname}",
        "formatted": "{$user.display_name}"
    },
    "displayName": "{$user.display_name}",
    "addresses":[
     {
       "type": "work",
       "streetAddress": "",
       "locality": "",
       "postalCode": "",
       "city": "",
       "region": ""
     }
    ],
    "prefferedLanguage": "{$user.prefferedlanguage}",
    "title": "{$user.title}",
    "phoneNumbers":[
    {
        "value":"{$user.phone}",
        "type":"work"
    },
    {
        "value":"{$user.x}",
        "type":"mobile"
    },
    {
        "value":"{$user.x}",
        "type":"fax"
    }
    ],
    "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
        "department": "{$user.department}",
        "organization": "{$user.x}"
    }
    
}

• On the Provisioning tab turn on Enable Provisioning for Create, Delete and Update User. Also set when user gets deleted to Delete (This is technically optional but if you want your users to be deprovisioned immediately set it to Delete if you want to have a window of 30 days from deletion until it actually gets deprovisioned in Templafy select Delete from the dropdown.). This is how the Provisioning settings should look:
  

• Finally after making sure all the settings are correct set API Status in the Configuration tab to Enabled and then click Save. The app should now start provisioning your Users and Groups to Templafy.