> ## Documentation Index
> Fetch the complete documentation index at: https://wundergraphinc-brendan-add-external-directive.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta

> Configure SCIM with Okta.

### Steps to set up SCIM with Okta

<Steps>
  <Step>
    Set up the password policy (password should contain at least one number and one symbol), if using the **Classic Engine on Okta** follow the below steps**,** or if using the  **OIE engine,**follow the steps as mentioned in this  [**Okta guide**](https://help.okta.com/oie/en-us/content/topics/identity-engine/authenticators/configure-password.htm)**.**

    * Navigate to Security -> Authentication on your Okta Administrator Dashboard.

    * Click Edit and update the password policy by enabling Number and Symbol, then click on Update Policy.

    <Frame>
      <img src="https://mintlify.s3.us-west-1.amazonaws.com/wundergraphinc-brendan-add-external-directive/images/studio/scim/image-1.png" />
    </Frame>
  </Step>

  <Step>
    Navigate to the Applications view within your Okta Administrator Dashboard.
  </Step>

  <Step>
    Click on **Create App Integration**.

    <Frame>
      <img src="https://mintlify.s3.us-west-1.amazonaws.com/wundergraphinc-brendan-add-external-directive/images/studio/scim/image-2.png" />
    </Frame>
  </Step>

  <Step>
    A dialog appears, select SWA - Secure Web Authentication and then click **Next.**

    <Frame>
      <img src="https://mintlify.s3.us-west-1.amazonaws.com/wundergraphinc-brendan-add-external-directive/images/studio/scim/image-3.png" />
    </Frame>
  </Step>

  <Step>
    Now give the app a name and populate the app's login URL with [**https://cosmo.wundergraph.com/login**](https://cosmo.wundergraph.com/login)**.**
  </Step>

  <Step>
    For "**Who sets the credentials**", select **Administrator sets username, user sets password.**
  </Step>

  <Step>
    For the **application username**, select **Email** and then click **Finish.**

    <Frame>
      <img src="https://mintlify.s3.us-west-1.amazonaws.com/wundergraphinc-brendan-add-external-directive/images/studio/scim/image-4.png" />
    </Frame>
  </Step>

  <Step>
    Now navigate to the **General** tab, click on **Edit** in **App settings.**
  </Step>

  <Step>
    Enable  **SCIM provisioning**and then click on **Save.**

    <Frame>
      <img src="https://mintlify.s3.us-west-1.amazonaws.com/wundergraphinc-brendan-add-external-directive/images/studio/scim/image-5.png" />
    </Frame>
  </Step>

  <Step>
    Navigate to the settings page on WunderGraph Cosmo and enable **SCIM.**

    <Frame>
      <img src="https://mintlify.s3.us-west-1.amazonaws.com/wundergraphinc-brendan-add-external-directive/images/studio/scim/image-6.png" />
    </Frame>
  </Step>

  <Step>
    Once SCIM is enabled, you will be provided with a  **SCIM Server URL,**copy it**.**
  </Step>

  <Step>
    Navigate to the API Keys page on WunderGraph Cosmo and click on New API Key.
  </Step>

  <Step>
    Provide the key with a name, select **Never** for **Expires,** then select  **SCIM**under **Permissions, t**hen click on **Generate API key.**

    <Frame>
      <img src="https://mintlify.s3.us-west-1.amazonaws.com/wundergraphinc-brendan-add-external-directive/images/studio/scim/generate-scim-key.png" />
    </Frame>
  </Step>

  <Step>
    Copy the API key provided.
  </Step>

  <Step>
    Navigate to the provisioning tab of the app created on okta, then click on **Edit**.

    <Frame>
      <img src="https://mintlify.s3.us-west-1.amazonaws.com/wundergraphinc-brendan-add-external-directive/images/studio/scim/image-8.png" />
    </Frame>
  </Step>

  <Step>
    Populate the **SCIM connector base URL** with the copied **SCIM server URL** .
  </Step>

  <Step>
    Populate the **Unique identifier field for users** with **"email".**
  </Step>

  <Step>
    Select **Import New Users and Profile Updates, Push New Users and Push Profile Updates** for **Supported provisioning actions.**
  </Step>

  <Step>
    Select  **HTTP Header**for **Authentication Mode.**
  </Step>

  <Step>
    Populate the **Authorization** field  under HTTP Header with the above-copied API key.

    <Frame>
      <img src="https://mintlify.s3.us-west-1.amazonaws.com/wundergraphinc-brendan-add-external-directive/images/studio/scim/image-9.png" />
    </Frame>
  </Step>

  <Step>
    Click on Test Connector Configuration, a dialog will appear showing the connector is configured successfully, click Close.

    <Frame>
      <img src="https://mintlify.s3.us-west-1.amazonaws.com/wundergraphinc-brendan-add-external-directive/images/studio/scim/image-10.png" />
    </Frame>
  </Step>

  <Step>
    Click on **Save.**
  </Step>

  <Step>
    Navigate to the "**to App"** tab**, and** click on **Edit.**

    <Frame>
      <img src="https://mintlify.s3.us-west-1.amazonaws.com/wundergraphinc-brendan-add-external-directive/images/studio/scim/image-11.png" />
    </Frame>
  </Step>

  <Step>
    Enable  **Create Users, Update User Attributes, Deactivate Users**and **Sync Password.**
  </Step>

  <Step>
    Under **Sync Password** for **Password type**, select **Sync Okta Password.**

    <Frame>
      <img src="https://mintlify.s3.us-west-1.amazonaws.com/wundergraphinc-brendan-add-external-directive/images/studio/scim/image-12.png" />
    </Frame>
  </Step>

  <Step>
    Click **save.**
  </Step>

  <Step>
    Now you can navigate the Assignments tab and assign users/groups who should have access to WunderGraph Cosmo.
  </Step>
</Steps>

<Info>
  If you are using both **SSO with OIDC** and **SCIM**, please make sure that the users assigned in both apps are the same.
</Info>