One of the most popular protocols for the management of users across multiple applications is called System for Cross-domain Identity Management, or SCIM for short.
In this article:
How to set up Okta SCIM for Deel HR
How to generate a new token for the Okta integration
How to disconnect the Okta integration
Supported Features
- The Okta SCIM provisioning integration enables Deel HR clients that use Okta to provision employees into other applications via Okta.
- This integration pulls employee data from Deel into Okta so that IT groups can provision users into other apps like Zendesk, Salesforce, etc.
Requirements
Clients must be subscribed to Deel HR.
Be an Org Admin, IT Developer Admin, or Integrations Admin-People to set up this integration.
Configuration Steps
How to set up Okta SCIM for Deel HR
✅ Step 1 – Connect to the Okta integration
From the Deel home page, select the More icon and Apps tab. Search for Okta and click on connect to initiate integration.
✅ Step 2 – Read the configuration overview
The first part of the integration is completed on Deel, while the second part is finalized in Okta.
✅ Step 3 – Generate SCIM API Base URL and Organization token
The SCIM API Base URL is the entry point to the Deel SCIM API, and the API Token is needed for authentication.
Save these credentials in a safe place, as they will be needed when configuring Okta.
✅ Step 4 – Follow step-by-step guide to complete configuration
How to generate a new token for the Okta integration
Once you have connected Deel and Okta, you will be able to access the settings tab. On this tab, you can see SCIM API Base Url and the list of Deel tokens generated for Okta.
To generate a new API token for Okta, Click New Token.
How to disconnect the Okta integration
Once Deel and Okta are connected, it will be possible to get the SCIM API Base URL and generate organization tokens.
Disconnect the integration by clicking the options menu and selecting Disconnect.
Troubleshooting
Why is userName null in Okta?
userName field in Okta is mapped to a worker's work email in Deel HR. If the work email is not filled in, the userName in Okta will be null. Enter the worker's work email in Deel to resolve this issue.
Can I map the work email in Okta?
The Deel SCIM API, which is behind this integration, returns a worker's work email in the userName property. Reach out to your Okta representative to obtain support on how to map this value to your desired property.
For other inquiries or help regarding the Deel HR Okta SCIM integration, kindly reach out to Deel support via chat or request form.