Requirements

To use SCIM Provisioning in Dagster Cloud, you must have a Dagster Cloud account on the Enterprise plan.

Supported features

• Create users. Users that are assigned to the Dagster Cloud application in Okta will be automatically added to your organization in Dagster Cloud.
• Update user attributes. Updating a user’s name or email address in the Dagster Cloud application in Okta will automatically sync the change to your user list in Dagster Cloud.
• Remove users. Unassigning a user from the Dagster Cloud application in Okta or deactivating the user in Okta will remove them from the organization in Dagster Cloud.
• Group push. Groups and their members in Okta can be pushed to Dagster Cloud as Teams.

Configuration steps

To turn on SCIM provisioning:

In Dagster Cloud:

• Navigate to the Provisioning page by clicking on your profile picture in the upper-right corner of the app, clicking Cloud Settings, and clicking the Provisioning tab.
• Check whether SCIM provisioning is marked as Enabled. If it isn't enabled, click the "Enable SCIM Provisioning" button to enable ii.
• Generate a SCIM API token to authenticate requests from Okta to the Dagster Cloud API. You'll use this token later in the Okta Admin console.

In Okta:

To enable SCIM provisioning:

• In the Okta admin console, navigate to the Dagster Cloud app.
• Click on the “Sign On” tab in the application, and add the name of your organization under the “Advanced Sign-on Settings” section.
• Still on the “Sign On” tab, select “Email” for “Application username format”. Note: provisioning may not work correctly if a different username format is set.