SCIM (System for Cross-domain Identity Management) automates user provisioning, so updates made in Okta—such as assigning or removing users—are automatically reflected in Productive.
Prerequisites
You must set up SSO before enabling SCIM. If you haven't set up SSO yet, follow the steps in Enabling SSO Using Okta before continuing.
Setting up SSO includes creating an application in Okta — only users assigned to that application will be provisioned to Productive.
Setting up SCIM with Okta requires the Ultimate subscription plan.
Features
The following features are supported in SCIM:
Create users — When a user is assigned to the Productive app in Okta, they are automatically created in Productive.
Update user attributes — Any changes made to a user's attributes in Okta are automatically reflected in Productive.
Deactivate users — When a user is deactivated in Okta or removed from the app, their Productive account is deactivated.
Enable SCIM with Okta
📌 Open Productive and Okta side by side in two browser tabs. This makes it easier to copy values between the two platforms without losing your place.
📌 You'll need to be an admin in both Okta and Productive to complete this setup.
Step 1: Enable SCIM in Productive
In Productive, go to Settings > SSO and SCIM.
Click Enable SCIM.
Once enabled, you'll see a Base URL and a Bearer token. Keep this window open as you'll copy both values into Okta in the next step.
Step 2: Set Up the SCIM Connector in Okta
In Okta, open the app you created when setting up SSO and go to the Provisioning tab.
Click on Configure API integration.
Step 3: Test the Connection
Paste the Bearer token from Productive into the API token field.
Click Test API Credentials to make sure the setup is valid.
Click Save.
Step 4: Configure Attribute Mappings
Still in the Provisioning tab, select To App from the sidebar.
Go to Attribute Mappings and make sure the following required Productive attributes are mapped to values stored in Okta: [!klaus clean up this sentence]
Username
Email
Given name
Family name
📌 If you're using any additional attributes across Productive and Okta, make sure those are mapped here as well.
Good to Know
1) Seats and SCIM Provisioning
Before syncing users, make sure you have enough available seats in Productive. If there aren't enough, the user won't be provisioned.
2) User Types
Currently, all users created through SCIM are set as Employees and Contractors.
Future updates may introduce support for Clients.
3) Permission Sets and Cost Rates
New users provisioned via SCIM are automatically assigned the Staff permission set.
4) Cost Rates
Cost rates are not synced through SCIM and must be set manually in Productive.