SCIM support for external Identity Providers (users)
complete
Cody Dunlap
The SSO flows are a bit awkward since they have to be initiated by the IdP at the moment.
Adding SCIM support would allow us to configure third-party Identity Providers such as Okta, Auth0, or Azure AD to provision users and groups in our Port accounts, allowing users to authenticate through Port rather than initiating login through the Identity Provider.
Matan Grady
complete
Happy to share that SCIM is not available for both Azure (Entra AD) and Okta, for both SAML and OIDC. This feature is now in a beta release; feedback is most welcome!
Azure/Entra AD - OIDC
https://docs.getport.io/sso-rbac/sso-providers/oidc/azure-ad#scim-configuration-beta
Azure/Entra AD - SAML
https://docs.getport.io/sso-rbac/sso-providers/saml/azure-ad/#scim-configuration-beta
Okta - OIDC
https://docs.getport.io/sso-rbac/sso-providers/oidc/okta#scim-configuration-beta
Okta - SAML
https://docs.getport.io/sso-rbac/sso-providers/saml/okta#scim-configuration-beta
Matan Grady
Happy to share the team have released the first part of this feature.
Docs for Azure Entra ID - https://docs.getport.io/sso-rbac/sso-providers/oidc/azure-ad#scim-configuration-beta
Current limitation -
* Only Azure Entra ID and Okta are supported
* Only OIDC is supported
This feature is now in Beta so feel free to share you feedback with us here, through the product, or over Slack.
Matan Grady
We opened a follow-up feature request to support teams with SCIM. Feel free to upvote
D
Dylan Rabdau
I would really hope when SCIM is released push groups would be apart of that. The current way to create teams is very frustrating. Push groups would make it so much easier to automate. This is how we handle membership in all our other apps.
Matan Grady
Dylan Rabdau: we hear you. I also opened a second feature request on the topic of groups. I upvoted on your behalf
Matan Grady
in progress
We are working on adding SCIM support. At this phase, it will be only for the User entity (not teams)
Gur Shafriri
exploring