Skip to main content

SCIM

SCIM user provisioning setup for automated dart workspace access management

Updated this week

Introduction

You can provision and manage users in Dart with the System for Cross-domain Identity Management (SCIM)

This feature is available on the Business plan. When configured, changes in your Identity Provider (IdP) will be reflected in Dart. These changes include

  • creating or deleting users to grant or revoke access to Dart.

  • updating user names

  • changing user roles

Dart works with Microsoft Entra, Okta, and any other IdP that supports SCIM 2.0.

Prerequisites

  1. You must be on the business tier

  2. Your IdP must support SCIM 2.0

  3. You must be a workspace admin

General setup

  1. Visit the Identity settings page in Dart to get started

  2. Copy the 'SCIM URL' to put into your IdP

  3. Copy your 'Authentication token' to put into your IdP

Note that in the future, if you rotate your token or if your account is removed or deactivated, the SCIM integration will need to be reconfigured with a new, valid Authentication token.

Roles

In your IdP, you can create certain roles that start with dart- and these roles will be reflected in Dart. The available roles mimic the roles in Dart, specifically

  1. dart-admins

  2. dart-members

  3. dart-guests

  4. dart-technical-admins

  5. dart-financial-admins

Some variants with casing, pluralization, and underscores are also permitted, so DART_MEMBER is also a valid role for example.

If a user has more than one role starting with dart- applied, the change will be rejected. If user has no valid roles they will default to a Member.

IdP-specific setup

Microsoft Entra

  1. Open Microsoft Entra and navigate to the 'Enterprise applications' list

  2. If you don't already have an application for Dart,

    1. Click 'New application' and then click 'Create your own application'

    2. Name it 'Dart', click 'Create', and wait for the application to be created

  3. Within the Dart application, click 'Provisioning', and when that loads, click the new tab that now says 'Provisioning'

  4. Change the 'Provisioning Mode' to 'Automatic'

  5. Paste the 'SCIM URL' from Dart into the 'Tenant URL' field

  6. Paste the 'Authentication token' from Dart into the 'Secret Token' field

  7. Click 'Test Connection'

  8. Click the 'Save' button at the top

Okta

  1. If you don't already have an application for Dart, create a SAML application in Okta for Dart according to the instructions here

  2. Open the new Dart application and then open the 'General' tab

  3. Click 'Edit' in the 'App Settings' section

  4. Ensure that 'Enable SCIM provisioning' is selected

  5. Click 'Save'

  6. Open the 'Provisioning' tab at the top and then ensure the 'Integration' tab is open on the left

  7. Click 'Edit' in the 'SCIM Connection' section

  8. Paste the 'SCIM URL' from Dart into the 'SCIM connector base URL' field

  9. Type 'email' in the 'Unique identifier field for users' field

  10. Ensure 'Push New Users' and 'Push Profile Updates' are selected but nothing else is

  11. Choose 'HTTP Header' in the 'Authentication Mode' field

  12. Paste the 'Authentication token' from Dart into the 'Authorization' field

  13. Click 'Test Connector Configuration'

  14. Click 'Save'

  15. Ensure the 'To App' tab is open on the left

  16. Click 'Edit' in the 'Provisioning to App' section

  17. Ensure 'Create Users', 'Update User Attributes', and 'Deactivate Users' are selected but nothing else is

  18. Click 'Save'

Related Articles
Roles and permissions
SAML SSO
Dart MCP
AI marketing agent
OpenClaw integration
Did this answer your question?