okta-scim-spring-boot-example
A SCIM Example with Apache SCIMple and Spring Boot
Apache SCIMple with Spring Boot and JHipster Example
To see how this application was created, please see its demo script.
If you'd like to see it running yourself, you can clone it and configure it using the instructions below.
Getting Started
Clone Apache SCIMple's spring-boot branch and install it:
git clone -b spring-boot [email protected]:apache/directory-scimple.git
cd directory-scimple
mvn install
Clone this project:
git clone https://github.com/mraible/okta-scim-spring-boot-example.git
cd okta-scim-spring-boot-example
Configure JHipster to use Okta with the Okta CLI:
okta apps create jhipster
Start the app and verify you can log in at http://localhost:8080:
source .okta.env
./gradlew
Start ngrok and copy the https URL:
ngrok http 8080
Configure SCIM on Okta
Create a SWA app on Okta to test your SCIM settings:
-
Log in to Okta and go to Applications.
-
Select Create App Integration and select SWA. Enter the following values and click Finish.
- App name:
SCIM Test - Login URL:
http://localhost:8080
- App name:
-
In the General tab, edit and Enable SCIM Provisioning.
-
Tab over to Provisioning and edit the SCIM Connection.
-
Put the ngrok URL in the Base URL field and append
/scimto the end. UseruserNamefor the unique identifier. Select all provisioning actions except for import groups. -
Click Test Connector Configuration. You can check the ngrok logs at http://localhost:4040.
-
Select To App > Edit and enable all the provisioning actions, except for sync password.
-
Go to Assignments and assign the
ROLE_USERgroup to the app.
Test syncing identities
-
Go to http://localhost:8080 and log in. You'll be able to log in, but won't have access to any entity screens.
-
Go back to your
SCIM Testapp on Okta and select Push Groups > Find groups by name. -
Enter
ROLE_and select ROLE_USER. Push it immediately and Save. -
Now if you refresh the JHipster app, you'll be able to see entity screens.
-
Go to Assignments and assign the
ROLE_ADMINgroup to the app. Then, configure it as a push group too. -
Refresh your browser in the JHipster app, and you'll be able to see the Administration menu.