Setting up automated provisioning with OneLogin

Available for: Enterprise plan
Set up by: Company-level admin
 

⚠️ The guide provides steps to configure the feature. For available functionality, rules that Miro SCIM follows and possible issues and how to resolve them please first see here.
Miro's Developer documentation for SCIM can be found here.

Prerequisites

The Miro SCIM API is used by SSO partners to help provision, manage users and teams (groups). SAML-based SSO must be properly set up and be functional in your Miro Enterprise plan before you start configuring automated provisioning. The instructions on how to set up SSO can be found here. 

Setting up Provisioning

Create a connector application

1. Go to Applications tab on the top bar of OneLogin admin center and click on the Add App button on the top right corner of the Application’s page.

2. In the Search section type "Miro" and choose the following app in the list marked as "SAML, provisioning":

   
   Miro on OneLogin applications tab
   You will be able to name the app in a specific way if you so desire. 
   Click Save in the top right corner of the page. 

Configure the application

1. Go to Configuration on the left panel and Enable API Connection:
   
   Enabling API connection
   Add the API Token to the respective field. You can obtain it from the SSO section of your Miro settings like so:
   
   API Token
2. Go to Provisioning section on the left panel and check that you have the following settings:
   
   Enabling provisioning
   ⚠️ By default Create, Delete and Update user needs Admin approval before provisioning. To disable it please uncheck these options.

Your Onelogin SCIM application is now configured and working. 

User Assignments

Miro SCIM Provisioning can help you to provision and de-provision users to your Enterprise subscription, as well as to automatically distribute them across teams. Users from OneLogin should be assigned to the Miro application to be automatically managed in Miro. To assign users to the application, follow the steps below (group assignments are not yet supported).

1. In Users directory choose a user to be assigned and provided access to Miro and click the Applications section on the left panel. Then click on the plus button in the top right corner of the page:
   
   A user that should be provided access

2. Select the Miro app and click Continue:

   
   Assigning a new login to the user
   

   You can update the user’s attributes on the following form and then click on Save:

   
   Updating the user's attributes

3. If you disabled the Admin approvals for the application then you will see that the user is provisioned to Miro:
   

Admin approval

In this case, the Admin will need to approve the assignment by choosing the Users section on the left of the Applications page and clicking on the Pending status:

and then clicking Approve.

💡 If at the moment of confirmation there are several users waiting for confirmation the admin will see an option to bulk-confirm the assignments at once:

Bulk approve pending logins

Your end-user is now assigned and is added to your Miro subscription!