So SCIM helps to get updates for any changes in user and group from Okta to service provider
but how do i get the initial users and groups to my system from OKTA?
When you assign the user to the application in which you’ve enabled SCIM, Okta will send requests to your SCIM server to (if it doesn’t already exist on your side) create the user.
Once the user is provisioned to your app, yes, your SCIM server will receive requests when they are updated.
Finally, whenever the user is unassigned from your app (or is removed from your Okta org), Okta will send a request down to your SCIM server to let you know the user is no longer active on the Okta side (Okta will not attempt to delete the user, but will just set active to false in an update)
1 Like