Permissions: Site Admin who can manage and configure SSO and SCIM

Product tier: Available for Advanced and Expert subscription tiers

Note: This feature is not yet available for all customers. Stay tuned for more information.

SCIM is an open standard that works alongside SSO to allow you to create, update and deactivate users in Greenhouse more efficiently.

Updates made via SCIM will be instantaneous. Provisioning with SCIM allows syncing to happen immediately in Greenhouse as soon as a user is assigned to the Greenhouse Recruiting application in Okta.

Configure Okta SSO

Before configuring SCIM, you need to configure Okta SSO in Greenhouse Recruiting.

Make sure your SSO is status is set to Configured.

Screenshot-of-the-configured-status-on-the-SSO-page.png

Configure SCIM for Okta

Copy the base URL and token in Greenhouse Recruiting

Go to the SCIM Configuration page. (Configure icon Configure-icon.png > Dev Center > SCIM Configuration)

Screenshot-of-the-SCIM-configuration-page.png

Note: This link will only appear for Site Admins who can manage and configure SSO and SCIM.

Click the toggle next to Enable SCIM for Okta.

Screenshot-of-the-enable-SCIM-for-okta-toggle.png

Paste the base URL and token in Okta

Open another tab in your browser and log in to your Okta account.

Note: You must be an Okta Admin to configure SCIM.

Go to the Greenhouse Recruiting app. Keep this tab open as you navigate between Okta and Greenhouse Recruiting.

Screenshot-of-the-greenhouse-recruiting-app-in-okta.png

In Greenhouse Recruiting, copy the link from the Base URL box by clicking Copy

Screenshot-of-the-copy-base-URL-button.png

Go to the Provisioning page in Okta, then click Integration. Paste the URL in the SCIM 2.0 Base URL field in Okta.

Screenshot-of-the-SCIM-2.0-base-URL-field-in-Okta.png

Go back to Greenhouse Recruiting. In the SCIM token section, click Generate token. Then, click Copy.

Go to the Okta Integration page. Paste the token in the OAuth Bearer Token field.

Screenshot-of-the-oauth-bearer-token-field-in-okta.png

Note: If you lose or forget your token, click Generate new token to create another. This will replace your existing token, and you will need to add the new token to your Identity Provider. SCIM will stop working until the new token is added to Okta.

Click Test API Credentials, then click Save.

Screenshot-of-the-test-API-credentials-and-save-buttons-in-okta.png

Map attributes between Greenhouse Recruiting and Okta

Attribute mapping allows you to sync fields in your Okta account with fields in your Greenhouse Recruiting account.

Tip: You can sync from both Okta to Greenhouse Recruiting and Greenhouse Recruiting to Okta.

A variable is a unique identifier assigned to an attribute. Every user attribute in Okta and Greenhouse Recruiting has an associated variable.

Example: The attribute that displays a user's first name in Okta has the variable name firstName.

Screenshot-of-the-first-name-attribute-in-okta.png

To start the attribute mapping process, follow the steps below to create attributes in Okta.

Okta profile editor

Go to the Profile Editor in Okta, then click on the profile labeled User (default).

Screenshot-of-the-user-default-profile-in-okta.png

Make sure your attributes include the following:

Display name Variable name Data type Attribute type
Username userName string Base
First name firstName string Base
Last name lastName string Base
Employee number employeeNumber string Base

Greenhouse Recruiting profile editor

Go to the Profile Editor in Okta, then click on the profile labeled Greenhouse Recruiting.

Click the + Add Attribute button.

Screenshot-of-the-add-attribute-button-in-okta.png

Create the following attributes:

Note: The display name you choose will not affect mappings. However, we recommend using the display names listed below to best differentiate between attributes.

Display name

Variable name Data type External namespace
First name firstName string urn:ietf:params:scim:schemas:core:2.0:User
Last name lastName string urn:ietf:params:scim:schemas:core:2.0:User
Employee number employeeNumber string urn:ietf:params:scim:schemas:core:2.0:User

When you finish creating an attribute, click Save or Save and Add Another.

Screenshot-of-the-save-buttons-in-the-add-attribute-window-in-okta.png

Mapping setup

After you finish adding your attributes, click Mappings on the Profile Editor.

Select one of the following tabs at the top of the window:

  • Greenhouse Recruiting User profile to Okta User Profile: This option maps attributes from Greenhouse Recruiting to Okta
  • Okta User to Greenhouse Recruiting User: This option maps attributes from Okta to Greenhouse Recruiting

Set up the mappings as shown below by selecting an option from each dropdown.

Screenshot-of-attribute-mappings-in-okta.png

When you finish, click Save Mappings.