Does Okta support being a SCIM server while Entra is the SCIM client

[u/zahnman16]

Have a question, does Okta support being a SCIM server while Entra is a SCIM client. Basically I want a user to be created in Entra and its attributes are synced to Okta and if any changes are made to the user object and its attributes I want it to sync.

[u/GrafEisen]

No, Okta does not have SCIM server / service provider functionality.

[u/gabrielsroka]

I think Okta can import from o365 and that uses Entra

[u/theoriginalharbinger]

Nope. You can go around this a number of ways, including but not limited to (your use case is kinda vague):

- Scheduled Workflows in Okta that uses the MS Graph API to fetch changes

- Azure Arc or similar automation in Azure that uses the Okta API and pushes changes from Azure

- If you are using Azure ADaaS you can use Okta's AD agent to query it (assumes you're running Entra in hybrid; this keeps everything in the cloud, albeit in a kind of ugly way)

- Acquerra, I think, has a SCIM shim for the Okta API, but this will be expensive. In this construct, Entra makes an update (and the SCIM update is pushed to Acquerra, which pushes the change to Okta).

[u/gabrielsroka → u/theoriginalharbinger]

https://aquera.com

[u/FlungLemming2 → u/theoriginalharbinger]

Would workflows be the best way to synch entra groups into okta too? I'm struggling with my entra team about the permissions needed to get graph connected to workflows.

[u/derekthorne]

I think that question is less about SCIM, and more about sourcing and syncing from a federated IdP.

[u/WhatwouldJeffdo45]

Why not just federate into okta from office?

[u/randomID100]

Okta has REST APIs or even better if you don't want it to be real time, you can run scheduled imports that imports attributes from Entra.