> ## Documentation Index
> Fetch the complete documentation index at: https://enterprise-docs.dify.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta

> Set up automatic member sync with Okta using SCIM. Version ≥ v2.7.0

This guide shows you how to connect Okta to Dify Enterprise Edition's SCIM service for automatic member synchronization.

## Create and Configure Your Okta Application

### 1. Log into Okta Admin Console

Go to your Okta admin portal and navigate to **Applications** → **Create App Integration**.

![](https://assets-docs.dify.ai/2025/05/c5f569eb091dfd55d6cc131fb74192f4.png)

### 2. Create the App Integration

1. Click **Create App Integration**

2. Configure the app:

* Platform: **Web Application**
* Sign-on method: **SAML 2.0**
* Click **Create**

3. Enable SCIM:

* In the General tab, find App Settings
* Click **Edit**
* Update the Application label if needed
* Enable SCIM provisioning
* Click **Save**

![](https://assets-docs.dify.ai/2025/05/5e5031051743b7ad391b38030d5a7abd.png)

### 3. Set Up SCIM Connection

1. Go to the **Provisioning** tab
2. Click **Configure API Integration**
3. Check **Enable API integration**
4. Enter your SCIM details:

* **SCIM 2.0 base URL**: Your SCIM endpoint URL
* **OAuth Bearer Token**: Your SCIM authentication token
* Enable **Import User** and **Import Group** based on your needs

5. Click **Test API Credentials**
6. After a successful test, click **Save**

![](https://assets-docs.dify.ai/2025/05/1dcde7b1f9fc3a26769ef91170f2be58.png)

### 4. Configure Provisioning Options

1. In the **Provisioning** tab, find the "To App" section and click **Edit**
2. Enable these features as needed:

* **Create Users**: Adds new Dify users when assigned in Okta
* **Update User Attributes**: Keeps user info synchronized
* **Deactivate Users**: Sets user status to "disabled" in Dify when deactivated in Okta

3. Click **Save**

![](https://assets-docs.dify.ai/2025/05/3f660720b6a51f9858e547ffc10e8bde.png)

### 5. Assign Users and Groups

**To assign users:**

1. Go to the **Assignments** tab
2. Click **Assign** and choose users or groups to sync with Dify Enterprise
3. Click **Save**

**To sync groups:**

1. Click **Push Groups**
2. Select the groups you want to sync to Dify Enterprise
3. Click **Save**

![](https://assets-docs.dify.ai/2025/05/cbc2fdde9886807eed30c1e5d208f8cd.png)

## Enable SCIM in Dify

Once Okta is configured:

1. Go to the Dify admin dashboard
2. Navigate to **Members** → click the menu button → **Automatic synchronization** → **Enable**

![](https://assets-docs.dify.ai/2025/05/08d3b05fc5dfaa1eb0a6b8bd523ea5f9.png)

> Sync isn't instant. Okta controls the sync schedule. Check your provisioning logs in Okta for sync history.