Set up SCIM provisioning with Okta for Engagedly
Table of contents
- Introduction
- Configuration
2.1. Generate credentials
2.2. User provisioning - Default attribute mappings
- Manage users in Okta
4.1. Add users
4.2. Assign users
1. Introduction
Okta provides centralized identity and access management (IAM) for your organization. Engagedly supports SCIM (System for Cross-domain Identity Management) provisioning, which automatically syncs users and profile data between Okta and Engagedly.
With this integration, admins manage users directly in Okta. When they create, update, or deactivate users, Engagedly automatically reflects the changes. This automation reduces manual effort, improves data accuracy, and strengthens security and compliance.
Any users you assign to the Engagedly application:
- Automatically appear in Engagedly
- Update when profile details change
- Deactivate when removed or unassigned
Contact our support team to enable Okta for your organization. After enabling, configure the integration in your Engagedly account.
You can also configure Okta for Single Sign-on (SSO). Learn more in Configure Okta for SSO with Engagedly. If required, enable both Okta SSO and Okta HRIS provisioning.
📒Note: This document covers the integration setup for both Tangerine (V2) and Indigo (V3). Screenshots are captured from Indigo (V3), so the user interface may vary slightly in Tangerine.
2. Configuration
Set up SCIM provisioning with Okta and Engagedly to automatically sync user data across both platforms.
📒Note: Only admins or users with integration permissions can configure SCIM.
Prerequisites
2.1. Generate credentials
After enabling the Okta integration in Engagedly, generate SCIM credentials (base URL and token).
Navigate to Settings > Integrations in Engagedly.- In the "HRIS" section, click Okta.

2 . Click + Add Connection, enter a name, and then click Save.

Engagedly generates the base URL and token.

Manage connections
You can delete and recreate the connection at any time if required.
Click the Overflow
Menu on the right side of the connection and select Delete to remove it.
📒Note: Syncing stops when the connection is deleted, but previously synced employees remain unaffected.
2.2. User provisioning
After generating credentials, configure provisioning in Okta.
Enable SCIM provisioning
Navigate to Applications > Applications in Okta.- Select your Engagedly application.

💡Tip: If you already have an SSO application, use the same app.
Navigate to the ACTIVE status and select the application you created.
Otherwise, create a new app integration.
Learn more in Configure Okta for SSO with Engagedly.
2. Go to the General tab, click Edit, and select Enable SCIM provisioning.

Configure provisioning settings
1. Go to the Provisioning tab and select Integration.
📒Note: The Provisioning tab appears only after selecting "Enable SCIM provisioning" (refer to Step 4).
2. Click Edit and configure the following:
a. In Unique identifier field for users, enter
.
💡Tip: Enter the value exactly as shown. The label is case-sensitive.
📒Note: Only the value
is used as the unique identifier.
b. Select the provisioning actions you want in "Supported provisioning actions" (Create, Update, Deactivate).
c. Select HTTP Header from the drop-down for "Authentication Mode".

Add Engagedly credentials
-
Switch to your Engagedly account.
-
Go to Settings > Integrations.
-
In the "HRIS" section, click Okta.
📒Note: Ensure that the Okta credentials are already generated in Engagedly. Refer to Generate credentials.
4. Copy the base URL and token from Engagedly generated earlier.
5. Return to Okta and paste the base URL and token into the respective fields.
6. Click Test Connector Configuration to verify the connection.
7. Click Save to apply the configuration.

📒Note: The sync fails if the base URL or token is incorrect.
The connection is established successfully.
Enable provisioning to Engagedly
-
In the "Provisioning" tab, go to To App and click Edit.

- Create Users
- Update User Attributes
- Deactivate Users
3. Click Save.

4. Scroll down to customize the attribute mappings.
3. Default attribute mappings
By default, the following attributes are mapped between Okta and Engagedly:
|
Engagedly attributes |
Okta attributes |
|
First Name |
First Name |
|
Last Name |
Last Name |
|
|
|
|
Job Title |
Title |
|
Department |
Department |
|
Business Unit |
Division |
|
Manager |
Manager ID (Email) |
|
Location |
City |
|
Employee ID |
Employee Number |
📒Note: These are the default mappings. Contact our support team to customize or add additional attributes as required. Ensure attributes in Okta align with the corresponding attributes in Engagedly to avoid sync issues.
4. Manage users in Okta
After configuring SCIM provisioning, add and assign users in Okta to sync them with Engagedly. Only assigned and active users are automatically created or updated in Engagedly.
4.1. Add users
After configuring provisioning, add users in Okta.
- Go to Directory > People.
You can view users if they are already added to Okta. Add more users individually or in bulk.
2. Click Add person to add an individual user.
3. Enter their first name, last name, and email (as username and primary email).
4. Click Activate now, and then click Save.
You can also activate users later. Until activation, their status remains pending.
4.2. Assign users
Assign users in Okta to sync with Engagedly.
- Go to Applications > Applications.
- Select your Engagedly application.
- Go to the Assignments tab.
- Click Assign > Assign to People.

5. Search for the user you added in the previous step.
6. Click Assign next to their name.
7. Enter their profile information, click Save and Go Back, and then click Done.
After assignment and activation, users are automatically synced to Engagedly.
💡Tip: For bulk assignments, create a group, add users to the group, and assign the group to the application.
📒Note: Removing or unassigning a user in Okta automatically deactivates them in Engagedly.