SCIM User Provisioning with Groups as a Custom Attribute

Hello Everyone!

What We Have

Currently, we are using Auth0 as our main authentication provider and have connected Okta as an Enterprise connection via SAML. Additionally, we’ve configured a SCIM connection to sync user profiles from Okta to Auth0.

We successfully pass user groups from Okta to Auth0 during login using this solution.
But those steps are only valid if our synchronization occurs during the user’s login.

What We’re Trying to Achieve

So, now we are looking for a way to pass user groups (array of names) information from Okta to Auth0 via SCIM provisioning. Unfortunately, Auth0 does not support the /groups endpoint in SCIM, and we’re unsure if it’s possible to use a custom attribute as user group names provider.

We don’t need full group entity synchronization—we only require Okta to sync a custom attribute with the names of the groups to which a user belongs.

Any insights or suggestions on how to implement this would be greatly appreciated!

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.