SCIM user provisioning
Learn how to enable automated user provisioning
Bunny supports the SCIM protocol for user provisioning. When enabled, SCIM allows your identity provider to create or delete user profiles in Bunny. This greatly simplifies the user onboarding and offboarding process for your administrators so we recommend its enabled if possible.
Step 1 - Create an API clientLink to Step 1 - Create an API client section
In order to enable SCIM user provisioning we must first create an API client in Bunny with the appropriate permissions assigned.
- In your Bunny account go to Settings > Developers > API clients.
- Click to add a New API Client.
- Give it a name like “SCIM client”
- Set a long access token expiry like “63072000” seconds
- Enable Authorization Code Grant
- Set a Redirect URI for the identity providers SCIM provisioning service.
For Onelogin use https://admin.us.onelogin.com/provisioning/oauth_redirect_uri - Click save and take note of the Client ID and Client Secret that are revealed.
Step 2 - Enable provisioning in the identity providerLink to Step 2 - Enable provisioning in the identity provider section
The next step is to configure the identity provider with Bunnys SCIM endpoint details.
On the admin panel in OneLogin select the Bunny app that you created as part of the SAML configuration.
Then, on the Configuration tab for the app enter the following values.
| SCIM Base URL | https://{{subdomain}}.bunny.com/api/scim/v2 |
| OAuth2.0 Token URI | https://{{subdomain}}.bunny.com/oauth/token |
| OAuth2.0 Authorization URI | https://{{subdomain}}.bunny.com/app/authorize |
| Client ID | Your Bunny API client ID |
| Client Secret | Your Bunny API client secret |
| Scope | security:read security:write |
Then click Save and scroll to the bottom of the Configuration tab where you will find a button to Authenticate.
Clicking the Authenticate button will display a link that will take you to Bunny to Approve the connection to OneLogin.
After clicking Approve you will be redirected back to OneLogin.
The final step is to select the Provisioning tab, check the box to Enable Provisioning and then click Save.
- Select the General tab of the Bunny SAML application that you created in Okta.
- Edit the applications settings and enable SCIM provisioning then click Save.
- Select the Provisioning tab that has appeared and click to edit.
- Set the SCIM base connector URL to
https://{{subdomain}}.bunny.com/api/scim/v2 - Select the check boxes to Push New Users and Push Profile Updates
- Change the Authentication mode to Header
- Now switch back to the API client that you created in Bunny for step 1. Click the Generate access token button and copy the access token into the Token box provided by Okta.
Step 3 - Test user provisioningLink to Step 3 - Test user provisioning section
Provisioning is now enabled for this application. If you add or remove users to the Bunny app in the identity provider they will be added or suspended in Bunny.