Enable SCIM provisioning (optional)

Black Duck Portal documentation

How to configure System for Cross-domain Identity Management (SCIM) provisioning for user management in Black Duck Portal.

SCIM provisioning automates user lifecycle management between your identity provider and Black Duck Portal. While SSO handles authentication, SCIM provisioning handles provisioning—automatically creating, updating, and removing user accounts based on changes in your identity provider.

Without SCIM provisioning, when an employee joins, changes roles, or leaves your organization, you must manually create, update, or delete their account in Black Duck Portal. With SCIM provisioning enabled, these changes happen automatically when you update your identity provider, ensuring immediate access for new employees and instant revocation for departing employees.

Key benefits include automated user provisioning and deprovisioning, synchronized attribute updates (such as name, email, and role changes), and reduced manual administration. Enable SCIM provisioning after configuring your SSO connection to eliminate the need to manually manage user accounts in both your IdP and Black Duck Portal.

Prerequisites

Enabling SCIM provisioning requires the following:

  • Organization Administrator permissions in Black Duck Portal.
  • Sufficient permissions to create an integration with Black Duck Portal in your IdP.
  • An identity provider that supports SCIM provisioning.
  • An established connection to your IdP in Black Duck Portal with OpenID or SAML 2.0. This configuration cannot be enabled when setting up a new connection.
Note: If you don't already have an established connection to your IdP in Black Duck Portal, see Connect to your IdP with OpenID Connect or Connect to your IdP with SAML 2.0.

Enable SCIM provisioning

Follow these steps to enable SCIM provisioning for user management in Black Duck Portal.
  1. In Black Duck Portal, go to Org Admin > SSO Connections.
  2. Select the options icon next to the connection you wish to modify and then select Edit.

    The Edit SSO Connection page opens.

  3. Under Enable SCIM Provisioning, enable SCIM provisioning.
    Additional SCIM configuration fields and options appear.
  4. Generate a bearer token for SCIM provisioning authentication:
    1. Select Regenerate Bearer Token.
    2. Copy the generated bearer token and store it securely.
  5. Use the SCIM Provisioning URL and bearer token you generated in the previous step to configure settings in your IdP.
    Note: The steps to complete this step vary from IdP to IdP. Refer to your IdP's documentation for specific instructions. Make sure the authentication method (in your IdP) is set to bearer token, and test the connection to verify it's working as expected.
  6. Select a User ID Attribute.

    The User ID Attribute is the unique identifier SCIM provisioning uses to match users in your IdP to users in Black Duck Portal. Available options include:

    • Email (default)
    • Username
    • External ID
  7. Under Attribute Mapping, map user attributes in your IdP to user attributes in Black Duck Portal.
  8. Select Update Connection.