[How-to] Integrate JumpCloud with EZO via SCIM 

The Custom SCIM Identity Management integration enables you to provision, update, and de-provision users from JumpCloud in applications that support SCIM. EZO helps you leverage this integration to centralize user lifecycle management, sync user data, and control access and authorization from the JumpCloud Admin Portal. 

You can learn more about how to set up SCIM provisioning with Azure AD.  Let’s walk you through some basic steps to implement SCIM-based user provisioning with JumpCloud!

Step 1: Enable SCIM in EZO

To enable SCIM in your EZO account, follow the pathway: Settings → Add Ons → User Provisioning via SCIM and select ‘Enabled. ’ Hit ‘Update’.

This action reveals additional information shown below.

1. SCIM Connector Base URL
2. Connector Key

You will need to enter the two values in the ‘Tenant URL’ and ‘Secret Token’ data fields later on. 

Step 2: Add EZO in JumpCloud 

Before you go ahead and start provisioning users, you must first add the EZO application to your JumpCloud. The process is very simple.

1. Go to your JumpCloud console and sign in.

2. Navigate to ‘User Authentication ‘ on the left-hand side.

Now, there are a couple of ways you can add new Applications. 

1. Configure through a new application connector.

Go to SSO Applications → All Applications → Add New Applications.

2. Click + Add New Application to add a new application, then click configure for the application to which you would like to add Identity Management.

Note: If Identity Management is listed in the Supported Functionality column, the application already has a pre-built SCIM Identity Management integration built by JumpCloud. Find a connector without this to continue. 

2. If this is a new application, click the General Info tab, add a Display Label and Description, and replace the logo. 

Click ‘Save Application’ to proceed. 

Next, configure the Identity Management application as required: 

Enter the SCIM Base URL and token key from the EZOfficeInventory application. 

Go to your EZO app and open the SCIM Integration settings:

Enter these two values into the JumpCloud Identity Management form. Once done, click ‘Test Connection. ’ 

Once the connection has been established, the following screen will appear after you activate the connection:

Make sure to turn off the Group Management, as the integration does not support group provisioning. 

TroubleShooting

1. Can we do Group Provisioning when implementing SCIM with Jumpcloud? (getting 404 error for group provisioning) 

No, we do not provision groups (Blog) for EZO. We can only provision users and not groups via SCIM, so please disable group provisioning.

2. Why is my user in EZO not being added? Getting the “unable to get or create user from service” error when adding a user?

Answer: The ‘create user’ error may occur if the user’s email already exists in the EZO system. Therefore, the error is thrown when attempting to create a user with the same email.