1. Configure Druva 2.0 app for user provisioning

Druva has its pre-configured SCIM app - 'Druva 2.0' in the Okta Administrator Console. Use this app to quickly configure and start provisioning users in Druva inSync.

Procedure

1. If you are using the Okta Developer Console, select Classic UI in the drop-down menu located above the Okta menu bar.
2. On the Okta menu bar, click Applications > Applications.
3. On the Applications page, click Add Application.
4. On the Add Application page, search for the Druva 2.0 application and click Add.

5. On the Add Druva 2.0 page, configure the General Settings as per your requirement and click Done.

5. On the Druva 2.0 app details page, click the Sign On tab and then click Edit.

   Note: This article assumes you are only configuring SCIM for user management. If you also want to configure Single Sign-on (SSO) using Druva 2.0 app, see, How to configure SSO for Druva Cloud Platform using Okta as IdP.

6. Under Settings, scroll down until you see the ADVANCED SIGN-ON SETTINGS area.
   • In the SAML Auth Token field, enter any string. Example - ThisxxIsxxAxxSamplexxString.
7. Under CREDENTIAL DETAILS area, select Email as the Application Username Format.
8. Click Save.

9. Now, click the Provisioning tab.
10. Select Enable API Integration check box to configure API integration.
11. In the API  Token box, enter the token that you generated in the inSync Management Console for SCIM-based user management.
12. Click Test API Credentials to test your integration.
13. If the test is successful, click Save.

    The test is successful for the following provisioning features:

    • Create users
    • Update user attributes

14. Now, configure the Druva 2.0 app to enable provisioning actions and add custom attributes. For more information, see

2. Configure the Druva 2.0 app provisioning settings

You must manually enable the following supported provisioning actions in the Druva 2.0 app:

• Create Users
• Update User Attributes
• Deactivate Users

The Druva 2.0 app comes with the pre-configured default base attributes and values which are mandatory in Druva inSync. You can also add or define your custom SCIM attributes that you plan to use in the SCIM mapping to classify the users in Druva inSync.

You must map the userPrincipalName custom attribute to value.

Procedure

1. Search for the SCIM app in the list of applications and open it.
2. Click the Provisioning tab.
3. In the left-hand side panel, select To App tab.
4. In the right-hand side panel, click Edit to select the provision the SCIM app with Okta attributes.
5. Select Enable for the following actions:
   • Create Users
   • Update User Attributes
   • Deactivate Users
6. Click Save.
   
7. Now, scroll down until you see the Attribute Mapping section. Define the value for the custom attributes that you want to use in Druva inSync to create a SCIM mapping for classifying users.
8. The last step of the SCIM app configuration is to assign the SCIM app to the users and groups that you want to manage in Druva inSync. For more information, see Assign users to the SCIM app.

3. Provisioning users from OKTA using custom attributes

Procedure

1. Search for the SCIM app in the list of applications and open it.
2. Click the Provisioning tab.
3. In the left-hand side panel, select To App tab.
4. Scroll down until you see the Attribute Mapping section. Define the value for the custom attributes that you want to use in Druva inSync to create a SCIM mapping for classifying users. 
5. Click on Go to Profile Editor.
   
6. On the Profile Editor page, under the Attributes section, click on Add Attribute.
   
7. As displayed in the following image, enter the values as specified in the following fields.

   Note: This example demonstrates the mapping of countryCode attribute. You can choose any other attribute as required.

   

• Data Type: string
• Display Name: countryCode
• Variable Name: countryCode
• External Name: countryCode
• External Namespace: urn:ietf:params:scim:schemas:core:2.0:User

8. Click Save.
9. On the Profile Editor page, under the Attributes section, click on Mappings.
   
10. Click on the Okta to Druva 2.0 tab.
11. On the left-hand side, select the correct attribute from the drop-down and map it to the custom attribute that was created in Step 9.
    
12. Click Save Mappings.
13. Log into the inSync Management Console and click Manage > Users > Mappings.
14. Click New Mapping to create a new mapping.
    
15. While you create a new mapping, you must use the exact syntax of the custom attribute that you created in Step 9 in OKTA, under the Attribute name field.
16. Provide the value of this attribute under the Value(s) field. This is the value of the attribute that will be verified by the SCIM App in OKTA with the OKTA users’ attributes. If the values match, then those users will get provisioned to inSync Cloud’s profile that is defined in the Mapping as follows: 
    
17. Click Finish.

4. Assign users to the Druva 2.0 app

The last step of the Druva 2.0 app configuration is to assign the Druva 2.0 app to the users and groups that you want to manage in Druva inSync.

Procedure

1. Search for the Druva 2.0 app in the list of applications and open it.
2. Click the Assignments tab.
3. Click Assign > Assign to People, if you want to assign the Druva 2.0 app individually to the users.
   OR
   Click Assign > Assign to Groups if you want to assign the Druva 2.0 app to groups containing users.
4. Assign the Druva 2.0 app to users or groups, based on your preference.
   

Ensure you assign the Druva 2.0 app to every user whose account you want to manage in Druva inSync. After you assign the Druva 2.0 app to the users, their accounts are automatically created in Druva inSync and configured as per the SCIM mapping.