Okta User Provisioning Configuration Guide (SCIM)

Supported features
- Provisioning
  - Create
  - Update
  - Deactivate
Requirements
- Admin access to an Okta org
- Tradespace Okta integration: https://www.okta.com/integrations/tradespace
- Customer ID - Ensure that you entered the correct value in the "Customer ID" field when installing the Tradespace app. This ID serves as a unique identifier for your organization or tenant. Please email Tradespace support if you do not have access this ID.
  - This should already be setup when Sign On (SAML) was configured.
- API Token - Please email Tradespace support if you do not have access this token.
Configuration Steps
1. Log in to your Okta admin portal and complete the following steps.
  1. Under the Applications tab, navigate to the Tradespace application.
2. Click on the “Sign On” tab in the application, and click “Edit” button.
  1. Scroll down to the “Advanced Sign-on Settings”
  2. Make sure you have entered the “Customer ID”
  3. Make sure you have selected “Email” for the “Application username format”
1. Click on the “Provisioning” tab in the application. Under the “Settings” panel on the left side, click the “Integration” link. Then click the “Configure API Integration” button.

Check the “Enable API Integration” box. Then copy and paste the API Token from Tradespace into the “API Token” field in Okta.
1. If you do not have access to the API Token, please email us and we will provide you this token.
2. Click "Test API Credentials" and verify that the connection is working.
3. Click "Save" to save your configuration in Okta.

Screenshot 2024-02-07 at 3.35.08 PM.png

Stay on the “Provisioning” tab in the application. Under the “Settings” panel on the left side, click “To App” under the Settings panel on the left.

Screenshot 2024-02-07 at 4.41.04 PM.png

Click the "Edit" button at the right.
1. Check the “Enable” box next to “Create Users” to allow users to be automatically provisioned into Tradespace whenever they are assigned to the Tradespace application in Okta.
2. Check the “Enable” box next to “Update User Attributes”.
3. Check the “Enable” box next to “Deactivate Users”.
4. Click "Save" to save your configuration in Okta.

Screenshot 2024-02-07 at 8.01.52 PM.png

Known Issues/Troubleshooting
- N/A
Notes
- Our Okta integration does not support Just-In-Time (JIT) provisioning. If this is required please email our support.
- Support: [email protected]