Automating user provisioning

Previously, we've looked at several things that together become a complete user provisioning process. Groups, directory integrations, and so on, all come together for complete onboarding and offboarding. Let's look at how we can put it all together.

As mentioned in Chapter 3, Single Sign-On for a Great End User Experience, there are different kinds of integrations available in the Okta Integration Network (OIN), and many of the applications have System for Cross-domain Identity Management (SCIM) possibilities. SCIM is an open standard to use for managing user identity information. With SCIM, there is a defined schema and a REST API for Create, Read, Update, Delete (CRUD) operations. To say it more simply, SCIM is a protocol to store user information in a way that identity data can easily be shared with multiple applications.

Let's look at it with an example. If an end user quits, and an administrator deactivates their account in Okta...