Requirements
- Advanced Authentication + User Management
Account owners and admins can provision users from supported identity managers. Robin uses the System for Cross-domain Identity Management (SCIM) standard with connector apps for supported identity providers. The SCIM token does not expire, but you can revoke it by hand.
SCIM provisioning features in Robin
The SCIM API supports these provisioning features in Robin:
-
Push new users, groups, profile updates and user deactivation. See Attributes Robin syncs.
-
Import new users, groups, profile updates (username, email)
-
Reactivate users
Robin's SCIM integration supports silent provisioning when you turn on SAML (Security Assertion Markup Language) or single sign-on.
Attributes Robin syncs
Robin requires only one attribute: a primary email (an email with primary: true). Robin also stores these attributes when your identity provider sends them.
Profile
-
externalId: the person's ID in your identity provider. -
userName: the person's username. When Robin creates the person, it uses this value as their Robin username, if the value is valid. Later changes touserNamedo not change the Robin username. -
name(givenName,familyName,formatted): the person's name. -
displayName: when your identity provider sends it, Robin uses it as the person's name instead of the first and last name. -
emails: the person's email addresses. When your identity provider replaces the whole user record, Robin removes the emails it no longer sends. -
title: the job title. -
locale: the person's locale. -
preferredLanguage: the person's preferred language. -
photos: the profile photo. -
addresses: the address type, city, region, postal code and country. Robin does not store the street address.
Status
-
active: when it isfalse, Robin deactivates the person.
Organization
-
department: the department. -
costCenter: the cost center. -
division: the division. -
employeeNumber: the employee number. -
manager: the manager'sexternalId. To set up managers, see the guide for Okta, Entra ID or OneLogin.
Groups
-
groups: the groups the person belongs to.
Configure SCIM for your identity provider
The setup steps depend on your identity provider. Select a supported provider to see its instructions: