Directory Sync

Max-Antoine
Max-Antoine

Directory Sync for Your Organization

Directory Sync will allow your organization to provision and de-provision accounts with your directory provider using SCIM 2.0.

 

Note: Only administrators with 'Owner' privileges have access to directory sync settings for your organization. Refer to how to set owner status for more information.

 

Get your API token and SCIM URL from Wave

Retrieve SCIM API Endpoint

  1. Navigate to 'Security' tab under your organization settings on Wave.

    Navigate to Security Tab
  2. Select 'Configure' under 'Directory Sync.'

    Select Configure

  3. Copy the SCIM endpoint by clicking on the clipboard icon.
    Copy SCIM Endpoint

Generate Access Token

  1. Navigate to 'Security' tab under your organization settings on Wave and select 'Add token' under 'Tokens.'

    Add Token

  2. Assign a name to your token, select 'Manage SCIM' for 'Scopes,' and press 'Create' to generate a new token.

    Generate Access Token

  3. Copy this token by clicking on the clipboard icon.

    Copy Access Token

Set up SCIM with your identity provider

The process for setting up provisioning depends on your identity provider.

 

Configure SCIM

  1. Access your organization’s IdP platform

  2. Paste the SCIM URL endpoint in your application's provisioning page

  3. Paste your security token in your application's provisioning page. 

  4. Once provisioning is set up, start adding users to the application as needed.

Assign users to the application

When you set up automatic provisioning, you will be asked to assign users to the application.

As part of this process, you may be asked to provide additional information about each user. Wave supports the following common basic attributes, as well as some optional extras.

Name

External Name

External Namespace
First Name* name.givenName urn:ietf:params:scim:schemas:core:2.0:User
Last Name* name.familyName urn:ietf:params:scim:schemas:core:2.0:User
Account Email* emails[primary eq 'true'].value urn:ietf:params:scim:schemas:core:2.0:User
Account Phone phoneNumbers[type eq 'personal'].value urn:ietf:params:scim:schemas:core:2.0:User
Active ressource.active urn:ietf:params:scim:schemas:core:2.0:User
Language ressource.locale urn:ietf:params:scim:schemas:core:2.0:User
Location addresses[primary eq 'true'].locality urn:ietf:params:scim:schemas:core:2.0:User
Profession ressource.title urn:ietf:params:scim:schemas:core:2.0:User
Work Email emails[type eq 'work'].value urn:ietf:params:scim:schemas:core:2.0:User
Personal Email emails[type eq 'personal'].value urn:ietf:params:scim:schemas:core:2.0:User
Work Phone phoneNumbers[type eq 'work'].value urn:ietf:params:scim:schemas:core:2.0:User
Personal Phone phoneNumbers[type eq 'personal'].value urn:ietf:params:scim:schemas:core:2.0:User