Configure the SCIM integration

Before you can provision 360Learning users and groups from an identity provider, you need to configure the SCIM integration in your 360Learning platform.

About the SCIM integration

System for Cross-domain Identity Management (SCIM) is a standard for automating the exchange of user information between platforms. It enables automatic employee data synchronization between the organization's employee directory and the 360Learning platform without the need to manually add or remove users, or use the CSV upload method.

The SCIM integration does not support back synchronization with an identity provider. This means that the platform can receive data from the identity provider, but cannot change the data in the identity provider.

The 360Learning platform supports nested groups while the most popular identity providers don’t support nested groups and handle only flat group structures. However, platform admins can manually manage the SCIM group hierarchy in the platform.

On groups, the update operation will rewrite only part of the group members specified in the request. Users who were manually added to the group but not in the update request will not be impacted. The group hierarchy will not be impacted either.

Any user who passes through provisioning with SCIM will be added to the integration group. Afterward, the user will be added to the connector's group. The privacy settings of the group are not considered.

Step 1: Request the activation of the connector

Email either your 360Learning Client Success Partner or Solution Architect with the following information:

• Integration Name: SCIM
• 360Learning Group ID: Include only the ID of the platform group. For more information about how to find the group ID, see Find the ID of a group.
• 360Learning Connector Admin Email: The email of the user who will act as the administrator for your integration. In 360Learning, this user must be either a platform administrator or the platform owner.
• (OPTIONAL) Custom Fields: If you want to sync additional fields, check that the corresponding user custom fields are created on 360Learning.

Step 2: Activate the SCIM integration on your platform

It is required to activate the SCIM integration on the platform group.

1. In the left sidebar, click on the platform group.
2. At the top right of the main section, click  Settings.
3. In the left sidebar, click Integrations → SCIM.
4. On the configuration page, select the desired Identity provider platform.
5. Click GENERATE TOKEN. This token is used to establish a connection with the selected identity provider.
   The list of generated authorization tokens appears.
6. (Optional) Select the Send an email with temporary password to newly created users check box.
   Select this check box if users need to log in to the platform using a password. You can clear the check box if users log in to the platform using single sign-on (SSO).
7. Click Activate to activate the SCIM integration.

Step 3: Get the SCIM endpoint URL and API key

The identity provider needs a SCIM endpoint and an API key to connect to the platform.

1. In the left sidebar, click on the platform group.
2. At the top right of the main section, click  Settings.
3. In the left sidebar, click Integrations → SCIM.

4. From the configuration page, copy the following information to be used for configuring your application:

   • The Endpoint URL
   • The SCIM authorization token. Click to copy the token’s full name.

You can generate several tokens, but only one is active for the selected identity provider. We recommend saving the full name of the token and the name of the provider for which the token was generated in a separate file.

You can now configure user provisioning with the selected identity provider.