SSO setup: Okta

SCIM provisioning

1. Okta → Applications → Browse Catalog → Add App
2. Busca Unimoni (o un Custom SCIM 2.0 connector)
3. Provisioning → Configure API Integration:

- Base URL: https://api.unimoni.example.com/api/v1/scim/v2 - API Token: scim_* desde /app/security → SCIM tokens

1. Test API Credentials → Save
2. Provisioning → To App:

- ✓ Create Users - ✓ Update User Attributes - ✓ Deactivate Users

1. Assignments → asigna usuarios / grupos

Group push

Si usas Group-based assignment:

1. Push Groups → selecciona los grupos
2. En Unimoni /app/security → SCIM mappings, define group → role

OIDC login

En paralelo con SCIM, configura OIDC para login passwordless vía Okta.