User Guide
Other documentationsDemoCommunity
  • Forest Admin
  • Getting Started
    • Setup guide
    • Master your UI
      • The Table View
      • Using the Layout Editor mode
        • Customize the Table View
        • Customize the Details View
        • Customize your creation and edition forms
      • Build a Summary View
      • Build an Explorer View
      • Using Smart Views
    • Tutorials
  • Collections
    • Manage your collection settings
    • Customize your fields
      • Edit widgets
      • Display widgets
      • Options
      • Default actions on relationships
    • Actions
      • Edit a record
      • Create a record
      • Using Smart Actions
    • Segments
    • Scopes
    • Performance
  • Workspaces
    • Introduction to Workspaces
    • Using Workspaces
      • Sharing your own Workspace URL with pre-selected data
      • Editing records with field components
    • Building a workspace
      • Workspace Incident Management example
      • Workspace KYC example
      • Transactions Monitoring & Fraud Management example
      • Fleet Management example
  • dashboards
    • Charts
      • Create a chart
      • Display record-specific charts in Analytics
  • Other tabs
    • Collaboration
      • Communicate with Notes
      • Approval requests
      • Inboxes
    • Activity
  • Integrations
    • Metabase
  • Project settings
    • General tab
    • Environments tab
    • Teams, Users & Permissions
      • Create and manage a team
      • Add and manage users
      • Manage roles and permission levels
      • Export users history
    • Security tab
      • SCIM integration with OneLogin
      • SCIM integration with Okta
      • Manual SCIM integration with Okta
    • Other project settings
      • Interface tab
      • Billing tab
    • Organizations
      • Organization settings
        • Configure SSO with AWS IAM
        • Configure SSO with Azure AD
        • Configure SSO with Google
        • Configure SSO with Okta
        • Configure SSO with OneLogin
Powered by GitBook
On this page
  • Supported features
  • Adding the Forest Admin app
  • Authenticating OneLogin in Forest Admin
  • Configuring the app
  • Adding Forest Admin custom parameters
  • Managing mapping rules
  • Adding custom user attributes
  • Managing teams with SCIM groups

Was this helpful?

  1. Project settings
  2. Security tab

SCIM integration with OneLogin

Adding Forest Admin to OneLogin

PreviousSecurity tabNextSCIM integration with Okta

Last updated 4 months ago

Was this helpful?

You must be on a to have access to this feature.

Supported features

  • Provisioning users from OneLogin to Forest Admin

  • Updating user role, permission level, and tags from OneLogin to Forest Admin: Enabling SCIM will disable user editing from Forest Admin.

  • Deleting user in Forest Admin when user is removed from Forest Admin app in OneLogin.

  • SCIM Groups are used to assign users to team.

Adding the Forest Admin app

Go to the Application tab and click "Add App"

In the search bar, look for SCIM and select "SCIM Provisioner with SAML (SCIM v2 Core)"

Authenticating OneLogin in Forest Admin

Name your app, then go to your Forest Admin project settings and enable the User provisioning feature: this will automatically generate a token that you will need to paste into your OneLogin app:

Add the following baseUrl and paste your token generated on Forest Admin:

  • SCIM Base URL: https://api.forestadmin.com/scim

Configuring the app

SCIM JSON Template: add the following:

{
  "schemas": [
    "urn:ietf:params:scim:schemas:core:2.0:User",
    "urn:ietf:params:scim:schemas:extension:forest:2.0:User"
  ],
  "userName": "{$user.email}",
  "name": {
    "givenName": "{$user.firstname}",
    "familyName": "{$user.lastname}"
  },
  "emails": [
    {
      "value": "{$user.email}",
      "primary": true,
      "type": "work"
    }
  ],
  "urn:ietf:params:scim:schemas:extension:forest:2.0:User": {
    "permissionLevel": "{$parameters.permission_level}",
    "role": "{$parameters.role}",
    "tags": "{$parameters.tags}",
    "teams": "{$parameters.teams}"
  }
}

Adding Forest Admin custom parameters

  • permissionLevel (string): should match exactly an existing permissionLevel in Forest Admin.

  • teams (string): comma separated list of names exactly matching a team name in the project. ex: "Operators,Support". This should either be filled in via a custom mapping rule or ignored if you are using Groups.

  • role (string): should match exactly an existing role in the project.

  • tags (optional string): key/value pairs, separated with a semicolon. ex: "regions:France,Italie;job:developer"

Managing mapping rules

Create mapping rules to automatically provide values to mandatory parameters role, and permissionLevel, and optionally tags. If you don’t create mapping rules, you will have to provide these values manually for each user provisioned.

Adding custom user attributes

You may want to add custom user attributes to base your mapping rules on. To do so, go in the "Custom User Fields" section of the Users tab.

Managing teams with SCIM groups

Groups allow you to create mapping rules between oneLogin roles and Forest Admin teams.

First, go to the Provisioning tab and on the Entitlement section, click on "Refresh" to fetch teams in OneLogin.

You can then create a rule for each role you want to map with an existing Forest Admin team.

When a role is added a removed from a user, it will be automatically added or removed to the corresponding Forest Admin team.

Forest Admin Pro plan