Configure SCIM with OneLogin

Postman supports SCIM provisioning through OneLogin with the Postman OneLogin app, enabling you to automate user provisioning and de-provisioning for your team.

You must be an administrator in OneLogin, and a Postman Team Admin or Super Admin to enable SCIM for your team. It's recommended that you enable SCIM with a service account assigned the Super Admin role.

With SCIM enabled, users won't have the option to leave your team on their own, and won't be able to change their account email or password. Only Team Admins and Super Admins have permission to remove team members. Only administrators in OneLogin have permission to use SCIM to change user account emails if they're associated with a domain your team verified.

Postman is available as an app in OneLogin, allowing you to enable user provisioning along with SSO. Before enabling SCIM, you must configure SSO with OneLogin for your Postman team.

Enable SCIM in OneLogin

To set up provisioning with OneLogin, do the following:

  1. Enable SCIM in Postman and generate a SCIM API key.

  2. In OneLogin, go to the Postman app and select Configuration.

  3. In the API Connection section, paste the generated SCIM API key in the SCIM Bearer Token text box, then select Enable.

    OneLogin configuration API connection

  4. In Postman, select Save.

Configure the OneLogin SCIM integration

Postman supports the provisioning features detailed in the SCIM provisioning overview. To configure provisioning, go to the Postman app in OneLogin and select Provisioning, then Enable provisioning.

OneLogin provisioning workflow

Select features to enable them, or clear them to turn them off.

You can also define what happens when users are deleted in OneLogin, their Postman app access is removed, or their accounts are suspended. You can choose to Suspend these users' Postman accounts or Do Nothing. If you choose to Suspend, the affected accounts will no longer appear in your Postman team dashboard. Regardless of your choice, users who are deleted, suspended, or have their app access removed will no longer be able to sign in to their Postman account.

Select Save to save your changes.

Last modified: 2024/07/01

Postmanaut dancing. Illustration.