---
title: Creating a provisioning connection
description: To allow PingFederate to manage users in Contentful using SCIM, create a service provider (SP) connection.
component: contentful
page_id: contentful:configuring_provisioning:pf_contentful_integration_creating_a_provisioning_connection
canonical_url: https://docs.pingidentity.com/integrations/contentful/configuring_provisioning/pf_contentful_integration_creating_a_provisioning_connection.html
revdate: June 26, 2024
section_ids:
  steps: Steps
  choose-from: Choose from:
---

# Creating a provisioning connection

To allow PingFederate to manage users in Contentful using SCIM, create a service provider (SP) connection.

## Steps

1. In the PingFederate administrator console, create a new SP connection:

   ### Choose from:

   * For PingFederate 10.1 or later: go to **Applications > Integration > SP Connections**. Click **Create Connection**.

   * For PingFederate 10.0 or earlier: go to **Identity Provider > SP Connections**. Click **Create Connection**.

2. Configure the basic connection details.

   1. On the **Connection Template** tab, select **Do not use a template for this connection**. Click **Next**

   2. On the **Connection Type** tab, select only **Outbound Provisioning**. In the **Type** list, select **SCIM Connector**. Click **Next**.

   3. On the **General Info** tab, in the **Partner's Entity ID** and **Connection Name** fields, enter a name of your choosing. Complete any other optional fields. Click **Next**.

3. On the **Outbound Provisioning** tab, configure provisioning with the following details.

   Learn more in [Configuring outbound provisioning](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_spconnectionconfigtasklet_saasprovisioningstate.html) in the PingFederate documentation.

   1. Click **Configure Provisioning**.

   2. On the **Target** tab, in the **SCIM URL** field, enter the **SCIM URL** that you noted in [Creating an access token in Contentful](pf_contentful_integration_creating_an_access_token_in_contentful.html).

   3. In the **SCIM Version** list, verify that **2.0** is selected.

   4. In the **Authentication Method** list, select **OAuth 2 Bearer Token**.

   5. In the **Access Token** field, enter the access token that you noted in [Creating an access token in Contentful](pf_contentful_integration_creating_an_access_token_in_contentful.html).

      |   |                                                                                                   |
      | - | ------------------------------------------------------------------------------------------------- |
      |   | PingFederate verifies the authentication details when you activate the channel and SP connection. |

   6. In the **Unique User Identifier** list, make sure **userName** is selected.

   7. In the **Provisioning Options** section, select only **User Create** and **User Disable/Delete**.

   8. In the **Remove User Action** list, select **Delete**. Click **Next**.

      |   |                                                                                                                                                  |
      | - | ------------------------------------------------------------------------------------------------------------------------------------------------ |
      |   | This option deletes the user from your Contentful organization but not the Contentful platform. Contentful doesn't support the "disable" option. |

   9. On the **Manage Channels** tab, follow the steps in [Creating a channel](pf_contentful_integration_creating_a_channel.html).

   10. On the **Outbound Provisioning** tab, click **Next**.

4. On the **Activation and Summary** tab, above the **Summary** section, turn on the connection. Click **Save**.