Complete this setup after you have finished configuring the SCIM integration in both 15Five and Okta. When done, Okta will create, update, and deactivate 15Five users automatically.
Before You Begin
- SCIM must be enabled in 15Five and the API token generated.
- The 15Five app must be added to your Okta instance with API integration enabled and credentials saved.
Steps
- In Okta, open the 15Five application.
- Click the Provisioning tab, then select the To App subtab.
- Enable Create Users.
- Enable Update User Attributes.
- Enable Deactivate Users.
- Click Save.
- Still on the Provisioning tab, click Go to Profile Editor.
- Map each attribute using the table below.
- Click Save Mappings.
- If you need to delay a user's access, add a start date before the next step. See Sync start, hire, or termination dates from Okta to 15Five.
- Navigate to the Assignments tab in the 15Five Okta app.
- Assign the 15Five application to the relevant employees or groups.
Attribute mapping reference
| Attribute | Attribute type | Value |
|---|---|---|
| Username | userName | Configured in Sign On settings |
| Given name | givenName | user.firstName |
| Family name | familyName | user.lastName |
| Primary email | user.email | |
| Title | title | user.title |
| Employee number | employeeNumber | user.employeeNumber |
| Location | location | String.join(", ", user.city, user.state, user.countryCode) |
| Start date | startDate | user.startDate |
| Hire date | hireDate | user.hireDate |
| Termination date | terminationDate | user.terminationDate |
| Manager ID | managerId | user.managerId |
Manager sync note: If a primary HR system feeds data into Okta, confirm the manager identifier is formatted as an email address or Okta employee ID. Any other format will result in an empty manager field in 15Five.
If Something Goes Wrong
| Issue | Check | Fix |
|---|---|---|
| Users are not created in 15Five after assignment | Verify Create Users is enabled under To App | Enable Create Users and click Save |
| Profile updates in Okta do not appear in 15Five | Verify Update User Attributes is enabled | Enable Update User Attributes and click Save |
| Deactivated Okta users remain active in 15Five | Verify Deactivate Users is enabled | Enable Deactivate Users and click Save |
| Manager field is empty in 15Five after sync | Manager ID value in Okta is not a recognized format | Update the manager identifier in your source system to email address or Okta employee ID |
| Changes sync slowly or not at all | Okta may need a manual push | Run a force sync from Okta; if unresolved, contact 15Five Support at support@15five.com |
Not Covered Here
This article covers standard user provisioning only — for group sync, custom attributes, and start/hire/termination date configuration, see the related articles below.