Skip to main content

Sync Users Between Okta and Productive With SCIM

Learn how to set up SCIM with Okta to automatically create, update, and deactivate users in Productive based on your Okta.

SCIM (System for Cross-domain Identity Management) automates user provisioning, so updates made in Okta—such as assigning or removing users—are automatically reflected in Productive.

This means:

  • When a user is assigned to the Productive app in Okta, they're automatically created in Productive.

  • If their details are updated in Okta, the changes are reflected in Productive.

  • If they're removed from the app in Okta, their Productive account is deactivated.

📌 Important: You must set up SSO before enabling SCIM. If you haven't set up SSO yet, follow the steps in Enabling SSO Using Okta before continuing.
​
Setting up SSO includes creating an application in Okta — only users assigned to that application will be provisioned to Productive.

Once SSO is set up, follow the steps below to connect Okta to Productive and start automatically syncing users.

👉 If you want to sync additional user data or custom employee fields, see Configuring Optional SCIM Attribute Mappings in Okta.

Setting up SCIM with Okta requires the Ultimate subscription plan.

Enable SCIM With Okta

📌 Open Productive and Okta side by side in two browser tabs. This makes it easier to copy values between the two platforms without losing your place.

📌 You'll need to be an admin in both Okta and Productive to complete this setup.

Step 1: Enable SCIM in Okta

  1. In Okta, open the Productive app and select the General tab.

  2. Under App Settings, click Edit.

  3. Under Provisioning, select SCIM.

  4. Click Save.

Step 2: Enable SCIM in Productive

  1. In Productive, go to Settings > SSO and SCIM.

  2. Click Enable SCIM.

  3. Once enabled, you'll see a Base URL and a Bearer Token. Keep this window open as you'll copy both values into Okta in the next step.

Step 3: Configure the SCIM Connection in Okta

  1. In your Okta, go to the Provisioning tab and under Settings > Integration, click Edit.

  2. In the Unique identifier field for users, enter email.

  3. Under Supported provisioning actions, select Push New Users and Push Profile Updates.

  4. Under Authentication Mode, select HTTP Header.

  5. Copy the Base URL from Productive and paste it into the SCIM connector base URL in Okta.

  6. Copy the Bearer Token from Productive and paste it into the Authorization field.

  7. Click Test Connector Configuration to verify the connection, then click Save.

Step 4: Configure Provisioning Actions

  1. Go to the Provisioning tab > Settings > To App.

  2. Click Edit.

  3. Enable the following options and click Save:

    • Create Users

    • Update User Attributes

    • Deactivate Users

Step 5: Set Up Attribute Mappings

  1. Go to Provisioning > To App > scroll to Attribute Mappings.

  2. Make sure the following attributes are mapped:

    • userName

    • givenName

    • familyName

    • email

    • emailType — must be set to work

  3. To map an attribute, click the pencil icon next to it to open the mapping dialog.

  4. Select how you want to map the attribute — you can map it to an Okta field, set a fixed value, or use an expression — then click Save

Related Articles
Enabling SSO Using Okta
Enabling SSO Using Google Workspace
Automatically Sync Users Between Microsoft Entra and Productive with SCIM
Configuring Optional SCIM Attribute Mappings in Microsoft Entra
Configuring Optional SCIM Attribute Mappings in Okta
Did this answer your question?