Search by

dmlab / module-admin-scim-okta

dmlab

Automatic Magento admin offboarding from Okta: when a user is removed or deactivated in Okta, their Magento admin account is deactivated via SCIM. Includes the Okta setup guide; installing it pulls dmlab/module-admin-scim.

Package info

github.com/dmlab-work/module-admin-scim-okta

Type:magento2-module

pkg:composer/dmlab/module-admin-scim-okta

Security

Advisories: 0

Aikido package health analysis

Transparency log

Statistics

Installs: 0

Dependents: 0

Suggesters: 0

Stars: 0

Open Issues: 0

0.2.1 2026-10-30 21:54 UTC

Requires

  • php: ~8.2.0||~8.3.0||~8.4.0||~8.5.0
  • dmlab/module-admin-scim: ^0.2.0
  • magento/framework: ^103.0.7
  • magento/module-backend: ^102.0.7
  • magento/module-config: ^101.2.7

Requires (Dev)

Suggests

Provides

None

Conflicts

None

Replaces

None

OSL-3.0 4f9906e6d1d6795ee0b7479457dcaac8bbe53ac5

provisioningmagento2magento 2magento2-moduleoktascimscim 2.0deprovisioningoffboardingadmin usersokta provisioninguser lifecycle

Published on Packagist.org on 2026-10-30 21:56 UTC

This package is auto-updated.

Last update: 2026-10-30 21:57:11 UTC

README

Okta SCIM provisioning for Magento 2 admin users.

CI codecov Packagist Version Downloads PHP License Magento

Automatic admin offboarding: when IT removes or deactivates a user in Okta, the matching Magento admin account is deactivated (disabled, not deleted). New hires get their admin role from their Okta groups before they first log in. Install this plugin and the SCIM server comes with it.

Okta SCIM setup in Magento admin: connector base URL, userName identifier and bearer-token header

Install

composer require dmlab/module-admin-scim-okta
bin/magento setup:upgrade

The require pulls dmlab/module-admin-scim — the whole provisioning chain installs at once.

Set up the Okta SCIM app

  1. In Magento, open Stores → Configuration → DMLab → Admin SCIM, enable Admin SCIM, set a Bearer Token, and leave Provider at — None — (Okta needs no request normalizer). With another admin-scim-<idp> plugin installed, its normalizer applies under None — uninstall it if this store provisions from Okta.

  2. Read the connector base URL from Stores → Configuration → DMLab → Admin SCIM → Okta Setup. It is this store's SCIM endpoint, e.g. https://your-host/admin-scim/v2.

  3. In Okta, create a SCIM application, then under Provisioning → Integration enter:

    Setting Value
    SCIM connector base URL the URL from step 2
    Unique identifier field for users userName
    Authentication Mode HTTP Header — Authorization: Bearer <token>
    Supported provisioning actions Push New Users · Push Profile Updates · Push Groups

  4. Enable the provisioning-to-app actions in Okta and assign users/groups.

Supported provisioning actions

  • Create — the new admin gets the Default Role, unless a pushed group maps a role.
  • Profile update — Okta sends PUT.
  • Deactivate / reactivate — active = false / true; disabled, not deleted.
  • Group push — create, rename, member add/remove, delete; the role is re-derived via Group → Role Map.

Only SCIM-created admins are managed; existing admins are not visible to or changed by Okta.

Requirements

Magento 2.4.7+ · PHP 8.2–8.5 · dmlab/module-admin-scim ^0.2.0 (installed automatically)

Pairs with admin-sso-okta — Okta login for the same admins.

Architecture

Okta is RFC-standard enough that admin-scim handles its requests directly; this plugin adds the Okta Setup panel and pulls the core.

License

OSL-3.0 © DMLab. Commercial licensing and support: https://dmlab.work.