Sign inTry Free

Important

New database features are no longer connected to engine versions; features are now enabled independently during scheduled update windows, and “major” and “minor” releases no longer exist in Helios. Please visit the release notes to view the latest features available in your database clusters.

IdP Configuration - Okta

On this page

SingleStore SCIM supports Okta with the SCIM 2.0 protocol. Use the SCIM 2.0 Test App (OAuth Bearer Token) app integration from the Okta Integration Network catalog.

Prerequisites

  • An SCIM configuration created in the Cloud Portal with a generated endpoint URL and secret token.

Create the Okta App Integration

  1. In the Okta Admin Console, navigate to Applications.

  2. Select Create App Integration.

  3. Search for SCIM 2.0 Test App (OAuth Bearer Token) and select it.

  4. In General Settings, set the Application label to an appropriate name (for example, "SingleStore SCIM").

  5. Enable Do not display application icon to users.

  6. Select Next.

  7. On the Sign-On Options page, skip the sign-in configuration (no changes needed).

  8. Select Done.

Configure the SCIM Connection

  1. In the Okta application you just created, select the Provisioning tab.

  2. Select Configure API Integration.

  3. Enable the Enable API Integration toggle.

    Note

    In your Okta application, map the SCIM userName attribute to the user's email address. SingleStore matches SCIM users by email address. If userName and email differ, provisioned users might not match existing SingleStore users.

  4. In SCIM 2.0 Base Url, enter the SCIM endpoint URL from your Cloud Portal SCIM configuration.

  5. In OAuth Bearer Token, enter the secret token generated in your Cloud Portal SCIM configuration.

  6. Select Test API Credentials to verify the connection. Okta displays the test results.

  7. Select Save.

Enable Provisioning Actions

  1. In the Provisioning tab, navigate to Settings > To App.

  2. Select Edit and enable the following:

    • Create Users

    • Update User Attributes

    • Deactivate Users

  3. Select Save.

Assign Users and Groups

  1. Navigate to the Assignments tab to assign users or groups to the application.

  2. To sync groups and memberships, add the group in the Push Groups tab and assign it in Assignments.

Remarks

  • Okta separates provisioning into two categories:

    • Assignments for user information.

    • Push Groups for group information.

  • If you change the SCIM endpoint, reset the SCIM configuration in Okta or create a new Okta application. Reusing the same Okta application with a new SingleStore SCIM endpoint might cause mismatch errors.

Last modified:

Was this article helpful?

On this page

Was this article helpful?

Verification instructions

Note: You must install cosign to verify the authenticity of the SingleStore file.

Use the following steps to verify the authenticity of singlestoredb-server, singlestoredb-toolbox, singlestoredb-studio, and singlestore-client SingleStore files that have been downloaded.

You may perform the following steps on any computer that can run cosign, such as the main deployment host of the cluster.

  1. (Optional) Run the following command to view the associated signature files.

    curl undefined

  2. Download the signature file from the SingleStore release server.

    • Option 1: Click the Download Signature button next to the SingleStore file.

    • Option 2: Copy and paste the following URL into the address bar of your browser and save the signature file.

    • Option 3: Run the following command to download the signature file.

      curl -O undefined

  3. After the signature file has been downloaded, run the following command to verify the authenticity of the SingleStore file.

    echo -n undefined |
        cosign verify-blob --certificate-oidc-issuer https://oidc.eks.us-east-1.amazonaws.com/id/CCDCDBA1379A5596AB5B2E46DCA385BC \
          --certificate-identity https://kubernetes.io/namespaces/freya-production/serviceaccounts/job-worker \
          --bundle undefined \
          --new-bundle-format -
    Verified OK

Try Out This Notebook to See What’s Possible in SingleStore

Get access to other groundbreaking datasets and engage with our community for expert advice.

Sign UpLog In