Creating a provisioning connection
To allow PingFederate to manage users in Contentful using SCIM, create a service provider (SP) connection.
Steps
-
In the PingFederate administrator console, create a new SP connection: For PingFederate 10.1 or later: go to Applications → Integration → SP Connections. Click Create Connection.For PingFederate 10.0 or earlier: go to Identity Provider → SP Connections. Click Create Connection.
-
Configure the basic connection details.
-
On the Connection Template tab, select Do not use a template for this connection. Click Next
-
On the Connection Type tab, select only Outbound Provisioning. From the Type list, select SCIM Connector. Click Next.
-
On the General Info tab, in the Partner’s Entity ID and Connection Name fields, enter a name of your choosing. Complete any other optional fields. Click Next.
-
-
On the Outbound Provisioning tab, configure provisioning with the following details.
For help, see Configuring outbound provisioning in the PingFederate documentation.
-
Click Configure Provisioning.
-
On the Target tab, in the SCIM URL field, enter the SCIM URL that you noted in Creating an access token in Contentful.
-
From the SCIM Version list, check that 2.0 is selected.
-
From the Authentication Method list, select OAuth 2 Bearer Token.
-
In the Access Token field, enter the access token that you noted in Creating an access token in Contentful.
PingFederate verifies the authentication details when you activate the channel and SP connection.
-
From the Unique User Identifier list, make sure userName is selected.
-
In the Provisioning Options section, select only User Create and User Disable/Delete.
-
From the Remove User Action list, select Delete. Click Next.
This option deletes the user from your Contentful organization but not the Contentful platform. Contentful doesn’t support the "disable" option.
-
On the Manage Channels tab, follow the steps in Creating a channel.
-
On the Outbound Provisioning tab, click Next.
-
-
On the Activation and Summary tab, above the Summary section, turn on the connection. Click Save.