Skip to main content

ARIS Technical Help

Set up SCIM (ARIS Enterprise) and on-premises

SCIM stands for System for Cross-domain Identity Management (SCIM) and is designed to facilitate the management of user identities in cloud-based applications and services.

ARIS supports SCIM 2.0.

It is recommended that you use your own local user who has the Technical configuration administrator function privilege and the User administrator function privilege for SCIM provisioning. This user can generate a bearer token and forward it together with the SCIM endpoint URL to the SCIM administrator.

Prerequisite

You have the Technical configuration administrator function privilege.

Enable SCIM

  1. Click Application launcher Application launcher > Administration Administration. Configuration Configuration is displayed.

  2. Click User Management.

  3. Click the arrow next to SCIM.

  4. Click SCIM server.

  5. Click Edit Edit.

  6. Select Enable Identity management system (SCIM).

  7. Copy the SCIM endpoint URL value and hand over the SAML endpoint URL to your identity provider for provisioning.

  8. Hand over the preconfigured value of the SCIM endpoint URL and provide it together with the bearer token to your IdP Administrator.

  9. Optional: Enable/Disable the e-mail notification for user creation. That means that if a user is created on the SCIM server side, each newly created user receives an e-mail about the creation.

  10. Click Save Save.

  11. Copy the endpoint URL and hand over the endpoint URL to your identity provider for provisioning.

Generate bearer token

  1. Log in to ARIS Administration as the local user created for SCIM provisioning:

    http(s)://<arisservername>/umc?skipsso=true

  2. Click Application launcher Application launcher > Administration Administration. Configuration Configuration is displayed.

  3. Open the User management view by clicking User management User management. The list of users is displayed.

  4. Click the user name of the current user. The bearer token is always user-specific. In principle one bearer token is sufficient system-wide.

  5. Click SCIM bearer token.

  6. Click Generate bearer token Generate bearer token.

If the bearer token is newly created, the bearer token is displayed in the SCIM bearer token field. If a bearer token already exists, the Generate bearer token dialog opens and you can confirm that a new bearer token should be created. ARIS with SCIM is set up.

Copy the Bearer token value and hand over the bearer token value to your identity provider for provisioning.

Specify SCIM client

You can specify a SCIM client.

Prerequisite

You have the Technical configuration administrator function privilege.

Procedure. Procedure

  1. Click Application launcher Application launcher > Administration Administration. Configuration Configuration is displayed.

  2. Click User Management.

  3. Click the arrow next to SCIM.

  4. Click a SCIM client.

  5. Click Edit Edit.

  6. Adjust your settings.

    Specify whether the synchronization of users or user groups is enabled for the configured application. A valid provisioning scenario is to use the SCIM provisioning user interface for adding users from the SCIM client to the SCIM server and removing users from the SCIM server.

  7. Click Save Save.

You have specified a SCIM client.

To test the connection, click Test connection Test connection.

Add user defined attributes

You can specify user defined attributes for SCIM. You can specify attributes for users and user groups.

Procedure. Procedure

  1. Click Application launcher Application launcher > Administration Administration. Configuration Configuration is displayed.

  2. Click User Management.

  3. Click the arrow next to SCIM.

  4. Click User attributes.

  5. Click Add Add. The dialog opens.

  6. Enter a name for the schema.

  7. Click Upload schema file. The dialog opens.

  8. Navigate to the JSON file that contains the SCIM schema extensions for user attributes.

  9. Click Open.

  10. Click Add. The SCIM schema extension file is validated and imported if valid.

You have specified user defined attributes in SCIM. If you click User attributes, the number of SCIM schema extensions is displayed.

Update user defined attributes

You can update the user defined attributes in SCIM.

Procedure. Procedure

  1. Click Application launcher Application launcher > Administration Administration. Configuration Configuration is displayed.

  2. Click User Management.

  3. Click the arrow next to SCIM.

  4. Click User attributes.

  5. Select the user defined attribute you want to update.

  6. Click Upload Upload. The dialog opens.

  7. Click Select file. The dialog opens.

  8. Navigate to the JSON file that contains the updated SCIM schema extensions for user attributes.

  9. Click Open. The SCIM schema extension file is validated and imported if valid.

You have updated the user defined attributes in SCIM.

Download user defined attributes

You can download the SCIM schema extension file that contains the user defined attributes.

Procedure. Procedure

  1. Click Application launcher Application launcher > Administration Administration. Configuration Configuration is displayed.

  2. Click User Management.

  3. Click the arrow next to SCIM.

  4. Click User attributes.

  5. Select the user defined attributes you want to download.

  6. Click Download Download.

You have downloaded the SCIM schema extension file that contains the user defined attributes.

Delete user defined attributes

You can delete user defined attributes.

Procedure. Procedure

  1. Click Application launcher Application launcher > Administration Administration. Configuration Configuration is displayed.

  2. Click User Management.

  3. Click the arrow next to SCIM.

  4. Click User attributes.

  5. Select the user defined attribute you want to delete.

  6. Click Delete Delete.

You have deleted the user defined attributes in SCIM.