SCIM provisioning using OneLogin's connector app

Set up SCIM provisioning for Robin with OneLogin's connector app.

Supported provisioning features

Robin supports these provisioning features:

• Push New Users: When you create a user in OneLogin, Robin creates the user too.
• Push Groups: When you create a group in OneLogin, Robin creates the group too.
• Push profile updates: OneLogin pushes changes to a user's profile to Robin.
• Push User Suspension: When you suspend a user in OneLogin, or turn off the user's access to the application, Robin deactivates the user.
• Reactivate Users: You can reactivate user accounts in the application.

Prerequisites

Robin requires only one attribute: a primary email. The Robin connector in OneLogin maps these Robin fields to these OneLogin values:

To set up provisioning, you need administrator permissions and access to the Robin web dashboard. You also need OneLogin admin access to install apps in OneLogin.

Generate a SCIM token in Robin

OneLogin uses this token to connect to Robin.

1. In the web dashboard, go to Manage > Integrations.
2. Under Add Connectors, search for OneLogin and select Set up. If OneLogin is already in the Installed list, select Manage. The OneLogin page opens. Its Directory provisioning card shows the SCIM base URL.
3. In the Directory provisioning card, select Generate SCIM token. The SCIM Provisioning page opens. You can also open this page from the SCIM provisioning tile.
4. Select Generate Token for SCIM.
5. Copy the token. Robin shows the token only once.

Add the token in OneLogin

Add the Robin app in OneLogin and turn on provisioning with the token.

1. In a new browser tab, open the OneLogin admin portal.
2. Add the Robin application (by OneLogin, Inc., with SAML2.0 and provisioning).
3. On the Configuration tab, enter https://api.robinpowered.com/v1.0/scim-2 in SCIM Base URL.
4. Paste the token you copied from Robin in SCIM Bearer Token.
5. Select Enable. API Status shows Enabled.
6. On the provisioning settings, under Workflow:
   • Select Enable provisioning.
   • Choose whether to require admin approval to create, delete or update users.
   • Choose the action Robin takes when users are deleted or suspended in OneLogin, such as Suspend.
7. Select Save.

You can then assign people to the app.

Add optional fields

To add optional fields, create a new custom field:

1. Go to Users > Custom User Fields.
2. Select New User Field.
3. Use the Robin field name, such as costCenter, as the name and short name.

These custom fields are available in Robin:

• department
• costCenter
• division
• employeeNumber
• locale
• title
• manager
• preferredLanguage

Sync managers

To sync managers into Robin, the manager attribute should match the manager's OneLoginID in OneLogin.

For example, User A has the OneLoginID 255174535, and User B has the OneLoginID 255293122. To make User A the manager of User B, set the manager field of User B to 255174535. This value is User A’s OneLoginID. You find the OneLoginID in the user’s profile.

OneLogin must send each user’s OneLoginID as externalId. The manager must also be provisioned to Robin through SCIM, in the same Robin organization.

Robin links managers every 3 hours. It links only people whose record changed since the previous evening. If you add the manager later, change any attribute on the employee so your identity provider sends an update. Robin then links the manager.