magedevgroup/module-admin-scim-okta

Okta provider plugin for the admin-scim SCIM 2.0 server — normalizes Okta's active/group-push specifics and documents the Okta SCIM app setup. Installing it pulls magedevgroup/module-admin-scim (and, transitively, sso-core).

Maintainers

Package info

github.com/MageDevGroup-com/module-admin-scim-okta

Type:magento2-module

pkg:composer/magedevgroup/module-admin-scim-okta

Transparency log

Statistics

Installs: 0

Dependents: 0

Suggesters: 0

Stars: 0

Open Issues: 0

Security

Advisories: 0

Aikido package health analysis

0.0.1 2026-07-09 08:06 UTC

Requires

Requires (Dev)

OSL-3.0 9ad2a1b9fe219eff7f35232e9e9a28606a4c58ef

Published on Packagist.org on 2026-07-09 08:17 UTC

This package is auto-updated.

Last update: 2026-07-09 08:23:59 UTC

README

Okta SCIM provisioning for Magento 2 admin users.

License Magento PHP Version

A thin Okta provider plugin for the admin-scim SCIM 2.0 server. It normalizes Okta's SCIM specifics and documents the Okta-side setup. Okta is near RFC-standard, so the module is small: a mostly pass-through normalizer plus an admin setup surface.

Install

composer require magedevgroup/module-admin-scim-okta
bin/magento module:enable MageDevGroup_AdminScimOkta
bin/magento setup:upgrade

The single require pulls magedevgroup/module-admin-scim — the whole provisioning chain installs at once.

Set up the Okta SCIM app

  1. In Magento, open Stores → Configuration → MageDevGroup → Admin SCIM, enable Admin SCIM, and set a Bearer Token.

  2. Read the connector base URL from Stores → Configuration → MageDevGroup → Admin SCIM → Okta Setup. It is this store's SCIM endpoint, e.g. https://your-host/admin-scim/v2.

  3. In Okta, create a SCIM application, then under Provisioning → Integration enter:

    Setting Value
    SCIM connector base URL the URL from step 2
    Unique identifier field for users userName
    Authentication Mode HTTP Header — Authorization: Bearer <token>
    Supported provisioning actions Push New Users · Push Profile Updates · Push Groups

  4. Enable the provisioning-to-app actions in Okta and assign users/groups.

Supported provisioning actions

  • Create — Okta pushes a new user → admin_user created.
  • Update — profile changes → admin_user updated.
  • Deactivate / reactivate — sent by Okta as active = false / active = true.
  • Group push — group membership → role mapping (standard SCIM, handled by admin-scim).

How it works

Okta pushes SCIM 2.0 requests to the admin-scim endpoint. This plugin registers an Okta request normalizer into admin-scim's RequestNormalizerInterface seam and coerces Okta's one deviation — an active toggle sometimes serialized as a stringified boolean ("true"/"false") — into a native boolean, on the top-level body (POST/PUT) and inside PATCH operations. Everything else passes through unchanged; the actual admin-user provisioning and role mapping happen in admin-scim.

Requirements

  • Magento 2.4.x
  • PHP 8.3 – 8.5
  • magedevgroup/module-admin-scim (installed automatically)

License

OSL-3.0 © MageDevGroup. Commercial licensing and support: https://magedevgroup.com.