As an admin, you can set up user provisioning between LinkedIn Sales Navigator and Okta using System for Cross-domain Identity Management (SCIM) to help you automatically provision and remove Sales Navigator and TeamLink Extend licenses, users, and groups. SCIM is available for Sales Navigator Advanced and Advanced Plus users.
Once you have set up SCIM provisioning, you can:
- Ensure clean, up-to-date user data in Sales Navigator - SCIM keeps user attributes synchronized between Okta, OneLogin, or Microsoft Entra ID and Sales Navigator. Any data changes made within an organization’s identity provider (IdP) will be automatically reflected in Sales Navigator in less than one hour.
- Significantly reduce time and effort spent on user management - You can add, remove, or manage users at scale, which reduces the time and effort it takes to keep users up to date.
- Have centralized application management - Customers already have many vendor applications connected using SCIM, and their expectation is to manage LinkedIn solutions centrally in the same way.
- Boost license utilization - You can use automated assignments and revocation to make unused licenses available.
Supported SCIM features
- Create users
- Update user attributes
- Deactivate users
- Group push
- Import users
Steps
Complete the following steps to set up automatic user provisioning between Sales Navigator and Okta using SCIM.
- Configure Sales Navigator to support SCIM provisioning with Okta.
- Configure automatic user provisioning to Sales Navigator.
- Push Okta groups to Sales Navigator.
Prerequisites
You have completed the following prerequisites:
- Okta tenant with admin permissions.
- Sales Navigator and LinkedIn Admin Center access.
- Accurate user data in Sales Navigator.
Step One: Configure Sales Navigator to support SCIM Provisioning with Okta
-
Sign in to Sales Navigator as an admin and navigate to LinkedIn Admin Center.
-
Click the Settings tab and expand the SCIM dropdown menu. Click + Add new SCIM configuration.
-
Enter a name for the configuration and turn on the Auto-assign licenses toggle.
-
Select the appropriate license from the License assignment dropdown menu and click Generate token.
-
Copy the access token information that appears.
Step two: Configure automatic user provisioning to Sales Navigator
Complete these steps to configure the Okta SCIM provisioning service to create, update, and remove users in Sales Navigator based on user assignments in the Okta application.
To configure automatic user provisioning for Sales Navigator in Okta:
-
Sign in to the Okta admin portal and navigate to the Browse App Integration Catalog. Search for the Linkedin Sales Navigator application with SCIM support as shown in the following image.
-
Click Add integration and provide an application name.
-
Click the Provisioning tab and then click Configure API Integration.
-
Paste in the authentication token from LinkedIn Sales Navigator and click Test API Credentials.
-
Once validation is successful, click Save.
-
Ensure you’re in the To App settings on the Provisioning tab. Select the required options as shown in the following image.
-
Click the Assignments tab and start assigning users as shown in the following image.
Step three: Push Okta groups to Sales Navigator
Complete these steps to configure the Okta SCIM provisioning service to create, update, and delete groups in Sales Navigator based on the selected groups in the Okta application. If members of a pushed group are assigned to the application in Okta, they are synced to a matching group in Sales Navigator.
The Push Now feature for group synchronization isn’t supported by LinkedIn Sales Navigator. When a group is pushed from Okta, the initial group membership is successfully synchronized. However, using Push Now to re-synchronize memberships after manual changes in LinkedIn won’t remove members that were added directly in LinkedIn Sales Navigator. Administrators should manage group memberships exclusively through Okta to ensure consistency and avoid using Push Now to reconcile manually added members.
Important to know
Group names need to be unique in both Okta and Sales Navigator when you push groups for the first time. If you push a group with a name that already exists in Sales Navigator, you’ll receive an error message.
To configure group syncing for Sales Navigator in Okta:
-
Navigate to the Push Groups tab and select + Push Groups.
-
Search for the groups you would like to push and click Save.
-
Continue adding as many groups as you like.
-
To remove a group, click on the Push Status and choose Unlink pushed group.
