Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fcoralogix.com%2Fdocs%2Fuser-guides%2Faccount-management%2Fuser-management%2Fscim.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fcoralogix.com%2Fdocs%2Fuser-guides%2Faccount-management%2Fuser-management%2Fscim.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.) # SCIM Coralogix supports the [SCIM](http://www.simplecloud.info/) specification (System for Cross-Domain Identity Management), an open standard that allows you to automate user and group provisioning using a REST API.  SCIM lets you create users and groups in Coralogix and give them the proper level of access, as well as to remove access for users (de-provisioning) should they leave your organization or no longer need it. Note * If you have already added users to your Coralogix account, delete them before beginning this integration. If necessary, you may leave one admin user. * Upon completion of the SCIM integration, recreate all users through SCIM. ## Integrating Okta with Coralogix[​](#integrating-okta-with-coralogix "Direct link to Integrating Okta with Coralogix") ### Supported features[​](#supported-features "Direct link to Supported features") * **Create users:** New or existing users in Okta will be pushed to Coralogix as new users. * **Update user attributes:** Updates to user profiles in Okta (firstname, lastname, username) will be updated in Coralogix. * **Deactivate users:** Users deactivated in Okta will be deactivated in Coralogix. They won’t be able to log in using their team in Coralogix. If a user is reactivated, they will regain access to Coralogix and keep all previously specified access controls. * **Sync Okta groups to Coralogix**: An Okta group can be synced to Coralogix with all it users, moving a user between groups in Okta that are configured in Coralogix will move the user to another team. * **SCIM server authentication:** To ensure that accounts can't be created by unauthorized users, Coralogix uses a Bearer Token authentication. ### Useful links[​](#useful-links "Direct link to Useful links") [Okta SCIM Developer Doc](https://developer.okta.com/docs/reference/scim/) ### Instructions[​](#instructions "Direct link to Instructions") 1 . ### Create a new SAML 2.0 app integration in Okta[​](#create-a-new-saml-20-app-integration-in-okta "Direct link to Create a new SAML 2.0 app integration in Okta") Under the Applications section In Okta, press on Create App Integration and choose SAML 2.0. [![](/docs/assets/images/image-21-adfe811032944f1a6f3d5c0ea7d1a371.webp)](https://coralogix.com/docs/docs/assets/images/image-21-adfe811032944f1a6f3d5c0ea7d1a371.webp) In General Settings, the App name will be used by Okta as the application name displayed to users. You can choose any name you like. [![](/docs/assets/images/image-4-1024x586-9b8f717b2c4de3b0a4d140622843c654.webp)](https://coralogix.com/docs/docs/assets/images/image-4-1024x586-9b8f717b2c4de3b0a4d140622843c654.webp) In the next stage you will need to fill information the exists in Coralogix under Settings → Configure SAML. [![](/docs/assets/images/image-6-1024x477-db4c9e0bf7d5aa7576fb7be0c4b7185b.webp)](https://coralogix.com/docs/docs/assets/images/image-6-1024x477-db4c9e0bf7d5aa7576fb7be0c4b7185b.webp) [![](/docs/assets/images/image-22-1024x651-9af13d268c64704e2e001188c3d73475.webp)](https://coralogix.com/docs/docs/assets/images/image-22-1024x651-9af13d268c64704e2e001188c3d73475.webp) * Single sign on URL → Assertion Consumer Service URL * Audience URI (SP Entity ID) → Service Provider Entity ID/Audience * Default RelayState → `` * Name ID Format should be set to EmailAddress Once done, press **Next** and then **Finish** in the last stage. After clicking **Finish**, scroll down to SAML Signing Certificate, press on actions and choose View IdP metadata in the dropdown. Copy the metadata into a text file and save it as an .xml. [![](/docs/assets/images/image-8-1024x662-68376b74358c21aa43da098de0bbf824.webp)](https://coralogix.com/docs/docs/assets/images/image-8-1024x662-68376b74358c21aa43da098de0bbf824.webp) Return to the Coralogix SAML configuration. Upload the file you just created by clicking **Choose File** and selecting it from its saved location. [![](/docs/assets/images/image-9-1024x662-6d176b603a5e056e9a4acf88fb6abcde.webp)](https://coralogix.com/docs/docs/assets/images/image-9-1024x662-6d176b603a5e056e9a4acf88fb6abcde.webp) 2 . ### Enable SCIM 2.0 integration in Okta[​](#enable-scim-20-integration-in-okta "Direct link to Enable SCIM 2.0 integration in Okta") After successfully uploading the configuration file, navigate to **Settings > Keys > Team Keys** to create a Team API key with the following permissions: | Action | Description | | ------------------------------- | ------------------------ | | team-members:ReadConfig | View Team Membership | | team-members:Manage | Manage Team Membership | | team-groups:ReadConfig | View Team-Level Groups | | team-groups:Manage | Manage Team-Level Groups | [![team-api-keys.png](/docs/assets/images/team-api-keys-fda214155c0de7603fd531bd19a65409.webp)](https://coralogix.com/docs/docs/assets/images/team-api-keys-fda214155c0de7603fd531bd19a65409.webp) Go back to Okta and enable SCIM integration in the General tab. Once enabled, the page will refresh with a new tab - Provisioning. [![](/docs/assets/images/image-23-545f36edd306677ce3e3acf87b9176b8.webp)](https://coralogix.com/docs/docs/assets/images/image-23-545f36edd306677ce3e3acf87b9176b8.webp) Go to the newly added Provisioning tab and click Edit to configure SCIM integration. Choose the https\://api./scim endpoint that corresponds to your Coralogix [domain](https://coralogix.com/docs/docs/user-guides/account-management/account-settings/coralogix-domain/.md) using the domain selector at the top of the page. Select **Supported provisioning actions** as displayed on the screenshot below
In **Authentication Mode** select *HTTP Header* and paste the Provisioning Token that was generated in Coralogix under HTTP Header - Authorization [![](/docs/assets/images/image-15-1024x694-f77014c871179b9abe5323d88c6ae95a.webp)](https://coralogix.com/docs/docs/assets/images/image-15-1024x694-f77014c871179b9abe5323d88c6ae95a.webp) The connection is now set up. 3 . ### Assign users or groups to the Coralogix in Okta[​](#assign-users-or-groups-to-the-coralogix-in-okta "Direct link to Assign users or groups to the Coralogix in Okta") * To sync a group to Coralogix, you must add the group under **Assignments** tab by clicking **Assign to Group**. Note Group names must contain only supported characters, such as letters, numbers, underscores (`_`), or hyphens (`-`). Avoid using other special characters, such as periods (`.`). [![](/docs/assets/images/image-16-1024x662-fc84bd419b0763290758afec16eddf03.webp)](https://coralogix.com/docs/docs/assets/images/image-16-1024x662-fc84bd419b0763290758afec16eddf03.webp) * In the Provisioning section, you must enable the following permissions: **Create Users**, **Update User Attributes**, and **Deactivate Users**. [![](/docs/assets/images/image-3-b4ca434b6336989748dfc6da7abe5e16.webp)](https://coralogix.com/docs/docs/assets/images/image-3-b4ca434b6336989748dfc6da7abe5e16.webp) * After assigning a group to the app, the group should be pushed to Coralogix by going to **Push Groups** tab and searching the group. After successfully pushing the group, it will appear with a green color as active. [![](/docs/assets/images/image-17-1024x662-8383ae69aa58d341e70bf70dcf54eab6.webp)](https://coralogix.com/docs/docs/assets/images/image-17-1024x662-8383ae69aa58d341e70bf70dcf54eab6.webp) [![](/docs/assets/images/image-18-1024x662-2b5ed4015b77401f14587efe43106c97.webp)](https://coralogix.com/docs/docs/assets/images/image-18-1024x662-2b5ed4015b77401f14587efe43106c97.webp) * Checking the Groups in Coralogix, the new group (SCIM Test) should be visible in the list together with the existing groups. [![](/docs/assets/images/image-19-1024x662-d60ea05aa51e58d5d977f5f9af6abed1.webp)](https://coralogix.com/docs/docs/assets/images/image-19-1024x662-d60ea05aa51e58d5d977f5f9af6abed1.webp) ### Roles & scope[​](#roles--scope "Direct link to Roles & scope") Roles and Scope should be edited in Coralogix side under **Groups** per the relevant Okta group.
Sync using Okta cannot be supported as a custom attributes on groups sync via Push process is not implemented on Okta's side. For more information on how to assign Roles and Scope visit our [Team usage guidelines](https://coralogix.com/docs/docs/user-guides/account-management/user-management/teams/.md). ## Integrating OneLogin with Coralogix[​](#integrating-onelogin-with-coralogix "Direct link to Integrating OneLogin with Coralogix") **Supported Features**  * **Create Users:** New or existing users in OneLogin will be created as new users in Coralogix. * **Update User Attributes:** Updates to user profiles in OneLogin (firstname, lastname, username) will be updated in Coralogix. * **Deactivate Users:** Users deactivated in OneLogin will be deactivated in Coralogix. They won’t be able to log in using their team in Coralogix. If a user is reactivated, they will regain access to Coralogix and keep all previously specified access controls. ### Useful links[​](#useful-links-1 "Direct link to Useful links") [One Login SCIM Developer documentation](https://developers.onelogin.com/scim) 1 . Create an application. [![](data:image/webp;base64,UklGRiQPAABXRUJQVlA4IBgPAAAwbACdASoABJAAPm02l0ikIqIiIxCZ2IANiWlu7mFXx6WKgLB7t62+Tq63Y3vi3++eA/9O/s35T+ePgz9Be23LG28eg/8l+5H6D+1efHeD8Yf6n1Avx/+Sf570Kvg+y60/zAvW76p34/+B6BfWf/U+4F/I/6T/p/RD+qf5vxhPuX9v/0n3K/YF/Jv6L/sP6l/kf2Y+k3+o/9/+j88v0//8P9R8A387/ufXI9JgYBBv67Ksb+EgiusQXdy+iVQ7985fJ5Zn/oYVmKn+EgawpVAOHvLMvpWpIGMDthPJ4RGk5seDkvwrPISwX8OrzSHGoVYtnB7ermVU68JPpH7OUxsinNJNG9LaFKIZVVw2AZfIfeB0xim7BedSgFS5wpFvkJMzCTrR/5gSiTN3D/z7mj/2B2LVGyc+5o/9gdi1RsnPuaP/YHYtUbJz7mhvLOzTE9RXSeNwLznZKsDnLW0qqGFTaB+0LlanOp1V44Ss14hnrfV0iyxJW5AF093Bdi5d8+8onFBEOapoUOUotfqK7kFKxsJgg/+ugQwDu520WbscAt1pbYrEUvBFLwRS8EUvBFLwRS8EUvBFLwRS8EUvBHBL9YmFsNZ8hiG/WovRqHID9QozjbZIR5s9QtAqNgq8yRKOhcI+Bb4klFcGRayoI+Bb4UaK4Mi1lQR7J/rth3cIhpCAUvtpCXBUWxIf7xaT1oJ/mJuQH94tJ60E/zE3ID+8Wk9aCf5ibkB/eLR70eor8d6Z6unqkglHQuEfAt8KNFcGRayoI+Bb4UaK4Mi1lQR7/aOxyppPbPh9EZsdIZfEjnjRfkNTjvOXEunye+3hqscrxnu4NK4hUi1lQR8C3wo0VwZFrKgj4FvhRorgyLWVBHwLe62+OwqNwAEBsNV3HkfmOdL9tV4iEcQlRxNo3JXA9zk70tZFe0P1Y7M58nFYlu0oa8t0jCXlukYS8t0jCXlukYS8t0jCXlukYS8t0jCXliT8fBNBn8Bt0uryZweIpqTogVSH+6hhi1sPFFFcuxQh6k5vJPdEWdOj7HdHQuEfAt8KNFcGRayoI+Bb4UZcPEPannOHcFvGE0Bf4Vyy5e9ZW83RcLmLBtcOhcKIiyYoXz/aLhnf9GUXWB/M7l7WWhQkqrS7TKFWdzRcqb/oyi6wPv8XliM9d7IgAP7hLfAuv8AE5rAQ1PXaU0f2/+b9S6kmXmwZ6AI5t0uufq7q9A2RnIzCXOrRo2iUyB2wzY2KRDDLd9/6ts6DRwiVsgaNdKuIVIDLVV8RIn3ulcGRsxWhR56XPhbVn/ajo2/QD42PlcdiG/h6CGMuV3eSlidVzfn/s059lD78syYVRQNjitHKCYJMvy5sbFopJb9YGajHUkG/TVfcrbu0bbv1Ow0BBsOjlZwiPlhVNf05CT/qsNXVBeMjNRP2g07aOu8Dkw7Z77HNk2jt8zGuRIk2xf/toe34R7yO06FM1+uBkrYtTyrm1joEUkjA8nQmtd/byuWYs77Q6p7fElo+KGFdAr5NBswuneHedHOTsgPjB/9GMD4kSB7+ZC3iBgO5eVbOO0FYj7MIzUzU9iL/Ep4tdyGxAXb1VhEKLj0jPdchUtaMmOlgIIHdCTUaBjDtNoOV4vohuD3bj/zkPng8cYRjtCQquFrTJ0sR+keXogcybEfZu1aKckHkj+Pv2wjM4oOmOjL26E8AgWaidoy+mEasrOVp0ASXy7NqkbvY12s8N10bIG1XZoEouqkgVynCwrPtVqZfuq2wl98UJNz1n9CxSkUJ/U4/5/Ra/+U2AfPH2LmpdZPZaW/+odYjq2jJy8WrsQu3yF3hPmv66wthgxdsP+RU+Cpjd3mJgRpAC9nLg6REXdRGrFzNr0sN8yGEbLoGEzb2su11ZcecjHcBIP4o6SSq3bBd0Asfu7DfGzj6Tx9i4WLw3c2iOIRTS9mwlX7aglcp9BJ9Xb5uxEoOVHEgpeLcLGiEKbSXq2woEBaTMjwTZEH8eWygi6X5H2ADXT0M4Pocgv9zOAWdarCXQ30cB3qmellDps/S+uRhOtGTh1K9Mn12YryLmQ4/BEaIQ8nAxOXi8fJOYDZ8a0ocAjYMut0G8bw5iVLS28EQHgoiCMWcgsRKFCHv7wyE8TZic1tYT8X1meIVBFJvT+be0iMjBSL6iD/74OSENMnHF7o9XMzK7ViDmFFwvPiRL+8SpLSQpkgg0TlEJHQSwB5zsmh9gq5AiNgsETGb/IaVEq5zBg27jIIin9XIeU5zKp7/7FqjfjV/QyFZjwk1AaJtJlljgukQV4+0L2stt/yElQYtQo1wAobttz0mSjkgP+jkSXX0B/CDARpCtu5LKEqoox4ug149JrZPfv2h/QDBvSySx9ZtkTCHY1k6xC+IZWclV4PQys5KrwehlZyVXg9DPjBPf+af84XVxWDxn/dhIt3QDiFCb8hmIN2q24kPUrWQbrCNMymEi8KnzXz1lE301FLx7WEtSBjfp+H91t7Wd6mXaUER48JMhtpil9nb3CqXhDWokIz9gcyIoAWuzoBHe3pWFdPuNC5Z1wgUNeg/9TvvbGlMx38cu3qPqpQXOFHebZI25+WoyN6FSg+DGxSQzNqBJW2kTBkINTbGHCMEvd2P764OymlqzsTv79ohfzWuDSK753Q6SrxRhALsWBshczvmjhIRUU1vjh+ck/5ir+YUpnhPqTodU208GOwNO2Q+iIye8Im9gB/vvdJa3Kh1xgPnCKEWs2SVYFLyEgzmKsiR52EGPeFX4VT2prswsLN+EBXcEVGNTRhHGUl6jW1p+bb4EB68fVG2zfAVX7MktWCO4UitO+IOcG/e911iRP3BnYVhaBAIcFgAAAAAAQGcSe6O3D4tFxhncvNf4lbn2ElYHamW1BKIieJWqrj0UOTdlUIAsflFpzJ2NP+7YmbIu1c/CP0kB1+lUcxgWjtGzsXr1yqop6RM7O9u5e9KZqaeFt0FhJlsxIudexto8vnjHaR8RDBJRulLepf6VMh3p+wBSbmbotdIQG+d0NHL07zfc2yuRuOSCbw0jTOhlK5ZvbulUOKVnwytnPSB815ikiRZFgaa0bmJIFfuYr7TxfioJVt/YMaWv842TVF9MekAz54SJwMjAMBrlI+Zj3IG4girH0YrknLbRg2Xus+ZKQnOe6w+v4QItxkbrE0rpCVXrV92dElORQF0To4oUJTWso2TNFCG/depUhi1DPfGuuMXm8ZYl0V164u/mLmVNP9ylwAb6IfQZnQurSNM21Cy0lqMO/f+QFM2Xd0UbrvwPdjhZnJ8rVzlYAnPpvRL5hgBRhUtiJCgymI71kdZW2PWKTaMA3x855h71ZTRNjBTWft0NM+sJK3PKFLTnMVLVL1SbQtzugOfMSPDPPmCNGDz9wh/7/Xwss/SgDekgAAAAAAAABKlSDND8lByatCzKI1qYX29//baXwAOooAAAAAAAALeTxgYScEudNOmanygWWkfmvgEQJyB8LNsmDW5piBphrc0xA0w1uaYgaYa3NMQNMNbmmIGmGtzTEDTDW5piBphrc0xA0w1uaYgaYa3NMQNMNbmmIGmGtzTEDTDW5piBphUwGLvXATkhUd3of3SFOyBf4EnOr+iFM9HtBhgWOpoV/NwWfgmfE6EKNqvIQE1rLLAElIA9UGDe500FWA+UQJZEslXfiMxyoJv+NbDoza8tyfCurGzCPU8pIi6yRB1F15tszA3SNjKa0M11w2qbf++nUuTkdbc9IBb37uIPShLfMP4RMic5G1S4y12RoPyi3GtSlYHvCEXKcTKVzrzc+zFHqvZFgUv1+dBDBUde6uaNSBJoEZ7FwSqtNcVezG5gbD/S7sQ+PW+eo+PHA5t+Lf1TRepsDDT2Nw5MON+7xmJZRdCchZVX132Il3VJkicL5evZCegRFOaEwnjVTB+kVSvokAQYCjNwx9I4ARsSV5r7bCoQJV2QAAAAAAAA3jn/vGzCqefwk0OCMPlxXFNhh343ql5JUg9N2GFRRUQW3NvrxTR+ncVEjuvKSSdm7gbIc0D6dHUTgZ/jbi6lWRAP8Lb94bkWqJ9HQwA4RlsBmXyOMi7txtMbXYackPgDV8ZXy+UP99gcU0uJbUcwYhry7HWEuhabrDgjlfyZ3igE7lZLuEANGrUMUI5m1qqLu5Jjmt4Sai4g6uBZaTJVAyM+85KNTd37rcANy6Z6GKBgfJb4mR1rS7LNKIHrvL6B0JuSF3+jsSz4Z2q+Rclq2gpMhD9IGyJmNT0WbdUqPLzsjx7uRIMsJxGKEskQAnUVtN/+cGKLIkcv0YuCD30Zh5uBOk7F/SrGOTqzZiDnfMdBer+QAAAAAAACEc8JNa3h8D6prS5IutGkHfpo1ElTqbxj61iwkfwI3cisV0+pxOPBFU9cqFdccVS1FvgWz5TEQ5ZGzZxcIBp7/xZNBB8kumYJlLSUIw/QPEKeNkfEW7qdQbDcy8+WhAjDyXRsVjex3LxmMKk06yY++6lCp42E7C8eiEw9PsTAPrPp4swJydhbcautXIZz/H/RSUGPFQDwj8thPxGzylmFFE4oZL19q75TzMe+ZgNrBSInv7G70ox4GoWu4Vs40ADVAqRbP9biGRHwdw767Xkzdoe062iq3gYY8tjQZsaFflOWm0GQZOHeymhwbjxQ8SOlq5Tz9Mi1kcY6UG57XJtANrSW6KP8IX10CN226oB/m20QPFa8zyPlYf1nYsa4Q87IcP/mqMXxI0rejvC983k/7LnqDcmftojkL7AUr5sSdmtymJWb6XZ3V0KpucEVY7B3AAAAAAHOD3nYSrGx9+zAcPDGWnUJnX6+D0Hdqt4vWnFoFA4CKybgoh7Z5oUFVmbM6QwPrMfXK2fya/wifbjppeADPdwrhSuIwhQtJW4oKulQkUHIfL+VhYYLlL+bNzh87uB81KhGXr+qfykdxPeoW7ZiZnu9KU/3zjj/q65BBPKu6yihB5s79075rPHADG8ZWnQWFqDssDhHpb+OzKHc1WQN8IBpq44C3fQ7iCdX6Xn9rTN06X01S0F+vjfpLc0ilN19ufL+WazAAiObYZPafLcaTgz+VKj+f1sKLuKNic3c7Ohm7nZ0M3c7Ohm7nZ0M3c7Ohm7nZ0M3c7Ohm7nZ0M3c7Ohm7nZ0M3c7OmEbpzwyO1G9JfmAAA=)](data:image/webp;base64,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) * Use **`SCIM Provisioner with SAML (SCIM v2 Core)`** from **Find Applications**. 2 . Input the relevant Application and API Connection details. [![](/docs/assets/images/1-1024x771-ff79a10f6b98d74d709cb7803e3db4c6.webp)](https://coralogix.com/docs/docs/assets/images/1-1024x771-ff79a10f6b98d74d709cb7803e3db4c6.webp) 3 . Identify the Identity Provider Metadata by navigating to **SSO** > **Issuer URL**. [![](/docs/assets/images/2-1024x551-5541f12177d3e87baef6e0d34945dcc8.webp)](https://coralogix.com/docs/docs/assets/images/2-1024x551-5541f12177d3e87baef6e0d34945dcc8.webp) 4 . To use OneLogin roles as a group, add a rule to the app. [![](/docs/assets/images/3-1024x537-ab852b822ba8746753ec2b6286ffbcb2.webp)](https://coralogix.com/docs/docs/assets/images/3-1024x537-ab852b822ba8746753ec2b6286ffbcb2.webp) 5 . Enable automatic provisioning. [![](/docs/assets/images/4-1024x543-c1ef912c8407168b48af23d1529ccffa.webp)](https://coralogix.com/docs/docs/assets/images/4-1024x543-c1ef912c8407168b48af23d1529ccffa.webp) 6 . Validate configuration for testing your SAML SSO login. Choose the https\://api./scim endpoint that corresponds to your Coralogix [domain](https://coralogix.com/docs/docs/user-guides/account-management/account-settings/coralogix-domain/.md) using the domain selector at the top of the page. [![](/docs/assets/images/5-1024x629-47993c632c4e35e7286f42c38ab86e7f.webp)](https://coralogix.com/docs/docs/assets/images/5-1024x629-47993c632c4e35e7286f42c38ab86e7f.webp) ## Integrating Azure Active Directory with Coralogix[​](#integrating-azure-active-directory-with-coralogix "Direct link to Integrating Azure Active Directory with Coralogix") This integration will push Azure Active Directory Users and Groups to Coralogix every ***40 minutes***. A Coralogix admin user needs to assign [roles](https://coralogix.com/docs/docs/user-guides/account-management/user-management/teams/.md) to the Groups using Coralogix UI. Another option is to assign roles to a Group using the integration. **Supported features**: * Create Groups (supported attributes are: displayName, objectId, members) * Create Users (supported attributes are: userPrincipalName, givenName, surname) * Role - Assign a system role to a group: Platform Admin, Data Admin, Observability Lead, Standard User, Read-Only User, and Security User * Update Groups * Scope - Set group scope with "Exact" filter type * Delete users and Groups 1 . ### Generate a Coralogix API token[​](#generate-a-coralogix-api-token "Direct link to Generate a Coralogix API token") Navigate to **Settings > Keys > Team Keys** to create a Team API key with the following permissions: | Action | Description | | ------------------------------- | ------------------------ | | team-members:ReadConfig | View Team Membership | | team-members:Manage | Manage Team Membership | | team-groups:ReadConfig | View Team-Level Groups | | team-groups:Manage | Manage Team-Level Groups | [![team-api-keys.png](/docs/assets/images/team-api-keys-fda214155c0de7603fd531bd19a65409.webp)](https://coralogix.com/docs/docs/assets/images/team-api-keys-fda214155c0de7603fd531bd19a65409.webp) Copy the API key for use in the Enterprise Application configuration in Azure Active Directory. 2 . ### Create an Enterprise Application in Azure Active Directory[​](#create-an-enterprise-application-in-azure-active-directory "Direct link to Create an Enterprise Application in Azure Active Directory") * Log in to Azure. * Navigate to ***Azure Active Directory*** > ***Enterprise Applications*** > ***New Application***. * Select ‘***Create your own application***’. Enter the application name, select ***Integrate any other application you don't find in the gallery***, and click ‘***Create***’. [![](https://lh5.googleusercontent.com/M4dVluT-dOaW77-QDZhGraGKZ8ZASGN6b-DXa-Kv_QZ0hAXtV_X1zvrlN6T00rWo45I4mOfN6X3Iq6yXIdFqzZlGG5GRkMokStpivSkTqKdRvW9dHNAQJZClt9aOuEebEkF1vA7nBn4AefXVWA)](https://lh5.googleusercontent.com/M4dVluT-dOaW77-QDZhGraGKZ8ZASGN6b-DXa-Kv_QZ0hAXtV_X1zvrlN6T00rWo45I4mOfN6X3Iq6yXIdFqzZlGG5GRkMokStpivSkTqKdRvW9dHNAQJZClt9aOuEebEkF1vA7nBn4AefXVWA) * Once the Enterprise Application has been added successfully, click ‘***Provisioning***’. [![](https://lh3.googleusercontent.com/PLBKM1wdgbDC2O2zifut38vdE6hwivxLLnKSt00BIiDi8GrNjc5AsEVtvXFxed3nzqULHmni_x85U5czdbW7VSbVuNRypWytC1K_YLUpbmXtNVvz-MXzupouuHh9j9mML5VuuHJSn5qT1v2MSw)](https://lh3.googleusercontent.com/PLBKM1wdgbDC2O2zifut38vdE6hwivxLLnKSt00BIiDi8GrNjc5AsEVtvXFxed3nzqULHmni_x85U5czdbW7VSbVuNRypWytC1K_YLUpbmXtNVvz-MXzupouuHh9j9mML5VuuHJSn5qT1v2MSw) * Configure ***Provisioning mode***, ***Tenant URL*** and ***Secret token*** (the Coralogix Team API key). Choose the https\://api./scim endpoint that corresponds to your Coralogix [domain](https://coralogix.com/docs/docs/user-guides/account-management/account-settings/coralogix-domain/.md) using the domain selector at the top of the page. Test the connection to verify successful integration. [![](https://lh3.googleusercontent.com/_telXScX8N0eCHiJmaYZY4kPvAGd9_LFeNO3ywQWkzBky7LNl4AP7np8c4oa9-A0YOyR9DO7v2frxs0xsQl5cR8Z7QB4fSiG2_KHUmw1K4XNduIYogCi4y_8uMy5pyo41Yavwt2MuX019p_a9A)](https://lh3.googleusercontent.com/_telXScX8N0eCHiJmaYZY4kPvAGd9_LFeNO3ywQWkzBky7LNl4AP7np8c4oa9-A0YOyR9DO7v2frxs0xsQl5cR8Z7QB4fSiG2_KHUmw1K4XNduIYogCi4y_8uMy5pyo41Yavwt2MuX019p_a9A) * The Attribute Mapping section is activated after a successful connection is established. [![](https://lh6.googleusercontent.com/C1SQ38Xp3TS7l1AAN0KrWRX9Rn23JGSlCHwrqNsBQPZW3ouXO5j3FL5lW-Zu0NAZLqc5ZNgWSRh1kScJFNwHi5cOvb8lXE0PjH4NTyuD6ajIl7P3rPEYglmEX9jPYDDP8WNK9a4t0coGF-GfGQ)](https://lh6.googleusercontent.com/C1SQ38Xp3TS7l1AAN0KrWRX9Rn23JGSlCHwrqNsBQPZW3ouXO5j3FL5lW-Zu0NAZLqc5ZNgWSRh1kScJFNwHi5cOvb8lXE0PjH4NTyuD6ajIl7P3rPEYglmEX9jPYDDP8WNK9a4t0coGF-GfGQ) * Attribute mapping configuration (Group). The default Attribute Mappings and Target Object Actions are sufficient. [![](https://lh3.googleusercontent.com/CMIPFcxBNpAUkwEmyYRNgPcypXkleYoN3GiOxx3F9fsuklYpUUPIaq4RY0S9EMOFk9QJHZh3mlsLdd2CnXPVurBdjGhomN-5gyFB7eqPf3AAVpKVMtYDbpXNWrdKPUgSssKWwANg4pk1sk5lEA)](https://lh3.googleusercontent.com/CMIPFcxBNpAUkwEmyYRNgPcypXkleYoN3GiOxx3F9fsuklYpUUPIaq4RY0S9EMOFk9QJHZh3mlsLdd2CnXPVurBdjGhomN-5gyFB7eqPf3AAVpKVMtYDbpXNWrdKPUgSssKWwANg4pk1sk5lEA) * Attribute mapping configuration (User). The default Attribute Mappings are sufficient.  [![](/docs/assets/images/Updated-Azure-SCIM-screenshot-21c07e058cff41bc0ac6bb0b44d2e552.webp)](https://coralogix.com/docs/docs/assets/images/Updated-Azure-SCIM-screenshot-21c07e058cff41bc0ac6bb0b44d2e552.webp) * Ensure provisioning is ‘***On***’ [![](/docs/assets/images/New-9257ed448377ed0c7c53a816d6dde3d3.webp)](https://coralogix.com/docs/docs/assets/images/New-9257ed448377ed0c7c53a816d6dde3d3.webp) ## Additional resources[​](#additional-resources "Direct link to Additional resources") | | | | ------------------- | ------------------------------------------------------------------------------------------- | | Coralogix Endpoints | [Coralogix Endpoints](https://coralogix.com/docs/docs/integrations/coralogix-endpoints/.md) |