Skip to main content
Directory Sync - SCIM 2.0
Max-Antoine Clément avatar
Written by Max-Antoine Clément
Updated yesterday

Directory Sync for Your Organization

Directory Sync will allow your organization to provision and de-provision accounts with your directory provider using SCIM 2.0.

Note: Only administrators with 'Owner' privileges have access to directory sync settings for your organization. Refer to how to set owner status for more information.

Get your API token and SCIM URL from Wave

Retrieve SCIM API Endpoint

  1. Navigate to 'Security' tab under your organization settings on Wave.

    Navigate to Security Tab
  2. Select 'Configure' under 'Directory Sync.'

    Select Configure
  3. Copy the SCIM endpoint by clicking on the clipboard icon.

    Copy SCIM Endpoint

Generate Access Token

  1. Navigate to 'Security' tab under your organization settings on Wave and select 'Add token' under 'Tokens.'

    Add Token
  2. Assign a name to your token, select 'Manage SCIM' for 'Scopes,' and press 'Create' to generate a new token.

    Generate Access Token
  3. Copy this token by clicking on the clipboard icon.

    Copy Access Token

Set up SCIM with your identity provider

The process for setting up provisioning depends on your identity provider.

Configure SCIM

  1. Access your organization’s IdP platform

  2. Paste the SCIM URL endpoint in your application's provisioning page

  3. Paste your security token in your application's provisioning page.

  4. Once provisioning is set up, start adding users to the application as needed.

Assign users to the application

When you set up automatic provisioning, you will be asked to assign users to the application.

As part of this process, you may be asked to provide additional information about each user. Wave supports the following common basic attributes, as well as some optional extras.

Name

External Name

External Namespace

First Name*

name.givenName

urn:ietf:params:scim:schemas:core:2.0:User

Last Name*

name.familyName

urn:ietf:params:scim:schemas:core:2.0:User

Account Email*

emails[primary eq 'true'].value

urn:ietf:params:scim:schemas:core:2.0:User

Account Phone

phoneNumbers[type eq 'personal'].value

urn:ietf:params:scim:schemas:core:2.0:User

Active

ressource.active

urn:ietf:params:scim:schemas:core:2.0:User

Language

ressource.locale

urn:ietf:params:scim:schemas:core:2.0:User

Location

addresses[primary eq 'true'].locality

urn:ietf:params:scim:schemas:core:2.0:User

Profession

ressource.title

urn:ietf:params:scim:schemas:core:2.0:User

Work Email

emails[type eq 'work'].value

urn:ietf:params:scim:schemas:core:2.0:User

Personal Email

emails[type eq 'personal'].value

urn:ietf:params:scim:schemas:core:2.0:User

Work Phone

phoneNumbers[type eq 'work'].value

urn:ietf:params:scim:schemas:core:2.0:User

Personal Phone

phoneNumbers[type eq 'personal'].value

urn:ietf:params:scim:schemas:core:2.0:User

Did this answer your question?