> For the complete documentation index, see [llms.txt](https://help.docupilot.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.docupilot.app/~/changes/460/account-setup-and-administration/managing-your-org/security/user-provisioning.md).

# User Provisioning

## Prerequisites

Ensure you have 

* SSO is configured for your workspace
* You have admin access to your identity provider (e.g., Okta, Azure AD)
* SCIM provisioning is enabled in your Docupilot account

To get started, navigate to **Organization Settings > Security > User Provisioning.**

<figure><img src="/files/2g6UacNzriNdE504eF3k" alt=""><figcaption></figcaption></figure>

## Manual Provisioning

Users are created when they sign in for the first time using SAML SSO. This is the default provisioning method.

<figure><img src="/files/b7lMxf8EEelvjJ0vuFze" alt=""><figcaption></figcaption></figure>

## SCIM Provisioning

Follow the steps below to configure SCIM provisioning with Okta:

### Step 1: Generate API Key in Docupilot

<figure><img src="/files/DmHfx1Gp0FEJ2LV2UGIw" alt=""><figcaption></figcaption></figure>

Select SCIM Provisioning and click Create API Key to generate the API token.

* The API key is used to authenticate provisioning requests from Okta
* The key is displayed only once
* Store the API key securely for use in the next step

#### Step 2: Configure API Integration in Okta

<figure><img src="/files/xcPLFrnml1UAcO6r3JdC" alt=""><figcaption></figcaption></figure>

In your Okta application navigate to Docupilot:

* Go to the **Provisioning** tab
* Click Configure API Integration
* Select **Enable API Integration**
* UnSelect **Import Groups**
* Paste the API Key generated in Docupilot in the **API Token** Field
* **Test API Credentials** and Click **Save**.

<figure><img src="/files/RfivF1gFgpumVyYHi2cQ" alt=""><figcaption><p>Enabling API Integration in Okta</p></figcaption></figure>

#### Step 3: Enable Provisioning Actions

<figure><img src="/files/tv1pIoKf2T0hZGw9wrQR" alt=""><figcaption></figcaption></figure>

After saving the API integration, enable the required provisioning actions:

* Create Users
* Update User Attributes
* Deactivate Users
* Click Save after enabling the required options.

#### Step 4: Assign Users

Assign users or groups to the Docupilot application in Okta to start provisioning.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.docupilot.app/~/changes/460/account-setup-and-administration/managing-your-org/security/user-provisioning.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.