Set Up Okta Provisioning with Declaree via SCIM

This guide explains how to configure Okta provisioning with Declaree using SCIM.

Requirements

Before you start, make sure the following requirements are met:

• Create a dedicated user account in Declaree with admin rights.
  If you have more than one organization, add this account to the parent organization (the default organization for provisioned users).

• To sync groups successfully, ensure that each group name is unique. Duplicate group names will not be linked.

Step 1: Retrieve Information from Declaree

1. Log into your Declaree instance as an admin (preferably using the dedicated account).

2. Navigate to My Account → (click your name in the top-right corner).

3. Go to the Declaree API tab.

4. Click Generate Key and copy the generated key. You’ll need this later.

Step 2: Configure Okta

1. Log into your Okta instance as an administrator.

2. Navigate to Applications → Applications.

3. Select the Declaree application.

General Tab

1. Go to the App Settings section.
   

   

2. Click Edit.

3. Select the SCIM option for provisioning.

4. Click Save.

Provisioning Tab

1. Click Edit.

   

2. In SCIM connector base URL, enter:

   • https://app.declaree.com/SCIM/v2/ (for EU instance)

   • https://app.declaree.de/SCIM/v2/ (for DE instance)

3. In Unique identifier field for users, enter:

   • userName

4. In Authentication Mode, select HTTP Header.

5. In Authorization, paste the API key you generated in Step 1.4.

6. Click Test Connector Configuration.

   • If successful, click Save.

     

Step 3: Enable Provisioning Actions

In the Provisioning tab, you can now:

• Enable actions such as Create Users and Update User Attributes.

• Map Declaree attributes with Okta attributes.

👉 Note: We recommend disabling import from Declaree to Okta, as all user management should occur from Okta.

Step 4: Assign Users in Okta

1. Go to the Assignments tab.

2. Add users to the Declaree application.
   

(Optional) Map Organization via Custom SCIM Attribute (Per-Org Setup)

Use this step only if you want to manage users per organization in Declaree via Okta.

1. Add a Custom Attribute in Okta

1. In Okta Admin Console, go to
   Applications → [Your SCIM App]

2. Open the Provisioning tab and click Profile Editor

3. Click Add Attribute

4. Create the attribute with the following values:

   • Display name: Organization

   • Variable name: organization

   • Data type: String

   • External name: organization

   • External namespace:
     urn:ietf:params:scim:schemas:extension:enterprise:2.0:User

5. Map this attribute to the corresponding attribute in Okta (e.g. a user profile field or group-based value)

2. Configure the Organization in Declaree

1. In Declaree, go to Configuration → Profile

2. Set the Organization attribute on the user profile

   • Use the Code value

   • Ensure it matches the organization value sent from Okta via SCIM

This ensures that the organization defined in Okta is correctly mapped to the organization in Declaree.