Skip to main content

ARIS Technical Help

Set up SCIM (ARIS Advanced)

SCIM stands for System for Cross-domain Identity Management (SCIM) and is designed to facilitate the management of user identities in cloud-based applications and services.

ARIS supports SCIM 2.0.

ARIS supports the service provider-initiated SAML-based SSO. ARIS does not support the identity provider initiated SAML based SSO for public cloud.

In ARIS Advanced edition, the user limit is set to 200. Only 200 users are allowed to provision in ARIS Advanced edition.

Enable the identity management service.

  1. Open ARIS Advanced.

  2. Click Application launcher Application launcher > Administration Administration.

  3. Click Configuration management.

  4. Click Identity management.

  5. Select Enable Identity management system (SCIM).

  6. Copy the SCIM endpoint URL value and hand over the SAML endpoint URL to your identity provider for provisioning.

  7. Hand over the preconfigured value of the SCIM endpoint URL and provide it together with the bearer token to your IdP Administrator.

  8. Optional: Enable/Disable the e-mail notification for user creation. That means that if a user is created on the SCIM server side, each newly created user receives an e-mail about the creation.

  9. Click Save Save.

  10. Copy the endpoint URL and hand over the endpoint URL to your identity provider for provisioning.

Add user defined attributes

You can specify user defined attributes for SCIM. You can specify attributes for users and user groups.

Procedure. Procedure

  1. Click Application launcher Application launcher > Administration Administration.

  2. Click Configuration management.

  3. Click Identity management.

  4. Scroll down to User attributes.

  5. Next to the Number of SCIM schema extensions configured field, click Add Add. The dialog opens.

  6. Enter a name for the schema.

  7. Click Select file. The dialog opens.

  8. Navigate to the JSON file that contains the SCIM schema extensions for user attributes.

  9. Click Open.

  10. Click Add. The SCIM schema extension file is validated and imported if valid.

You have specified user defined attributes in SCIM.

Update user defined attributes

You can update the user defined attributes in SCIM.

Procedure. Procedure

  1. Click Application launcher Application launcher > Administration Administration.

  2. Click Configuration management.

  3. Click Identity management.

  4. Scroll down to User attributes.

  5. Next to the user attributes you want to update, click Upload Upload. The dialog opens.

  6. Click Choose file. The dialog opens.

  7. Navigate to the JSON file that contains the updated SCIM schema extensions for user attributes.

  8. Click Open. The SCIM schema extension file is validated and imported if valid.

You have updated the user defined attributes in SCIM.

Download user defined attributes

You can download the SCIM schema extension file that contains the user defined attributes.

Procedure. Procedure

  1. Click Application launcher Application launcher > Administration Administration.

  2. Click Configuration management.

  3. Click Identity management.

  4. Scroll down to User attributes.

  5. Next to the user attributes you want to update, click Download Download.

You have downloaded the SCIM schema extension file that contains the user defined attributes.

Delete user defined attributes

You can delete user defined attributes.

Procedure. Procedure

  1. Click Application launcher Application launcher > Administration Administration.

  2. Click Configuration management.

  3. Click Identity management.

  4. Scroll down to User attributes.

  5. Next to the user attributes you want to update, click Delete Delete

You have deleted the user defined attributes in SCIM.

Generate bearer token.

  1. Click Application launcher Application launcher > Administration Administration.

  2. Click Configuration management.

  3. Click Identity management.

  4. Click Generate bearer token Generate bearer token. ARIS with SCIM is set up.

  5. Click Back Back.

  6. Copy the SCIM endpoint URL and SCIM bearer token and hand over both values to your identity provider for provisioning.

If you want to use single sign-on, use SAML 2.0.