OneLogin SCIM provisioning for Groups

Question

I am building OneLogin SCIM Provisioner with SAML (Core Schema) app. I've created two controllers - Users and Groups. UsersController logic works perfectly - I can provision users and do all CRUD operations. But I am having issues with provisioning groups:

Based on the OneLogin articles (Get Groups and Provision Users into Groups) i get the initial GET hit that is trying to retrieve groups (when I refresh entitlements in OneLogin) but nothing comes accross on the OneLogin side. I've gone so far to return exact copy of the example response given in the article. Activity Event Log in OneLogin is showing that Refresh Entitlement operation has started and finished but the result of the operation is nowhere to be seen.

Has anybody experienced similar issue?

Every help and suggestion much appreciated.

Answer 1

Awesome that you're doing SCIM

In Onelogin groups and group memberships are expressed as "Entitlements" which is a fancy term for "things that can be set through rules in OneLogin"

So you need to go into your application and turn on provisioning for the Groups parameter.

Once you've refreshed entitlements (and your application has told OneLogin what groups you have) you should then be able to go into the "Rules" configuration in your OneLogin application and define rules to assign users to the various groups in your app.

Hope that helps.

Also if this is a commercial application (not something in-house) please contact [email protected] if you want something official and pre-configured in the OneLogin app catalog.