> ## Documentation Index
> Fetch the complete documentation index at: https://learn.biq.li/llms.txt
> Use this file to discover all available pages before exploring further.
# Configuring SCIM Directory Sync with Okta
> Automatically provision and deprovision users from your Okta directory to Biqli using SCIM.
**Enterprise Plan Feature**: SCIM Directory Sync is available exclusively for workspaces on the **Enterprise plan**.
For Biqli Enterprise users, you can automatically provision and deprovision users from your Okta directory to Biqli using SCIM Directory Sync.
## Prerequisites
Before configuring SCIM Directory Sync, you must first create and configure a SAML application in Okta.
Follow our guide to configure Okta SAML Single Sign-On for your Biqli Workspace.
## Step 1: Configure Directory Sync on Biqli
Navigate to your workspace **Security Settings**. Under the **Directory Sync** section, click **Configure SCIM** to start setting up SCIM provisioning for your workspace.
In the SCIM configuration modal:
1. **Select Identity Provider**: Choose **Okta** as your directory provider.
2. **Enable SCIM**: Toggle on SCIM directory synchronization.
3. Click **Save changes**.
This will generate a Directory Sync connection for your Biqli workspace and return **2 values** which you will need in Step 2:
* **SCIM 2.0 Base URL**
* **OAuth Bearer Token**
## Step 2: Add Provisioning to SAML Application
Open the **General** tab of your existing Biqli Okta SAML application in your Okta Admin Console. Under **App Settings**, click **Edit**.
Select the **SCIM provisioning** checkbox and click **Save**.
The **Provisioning** tab should now be visible in your Okta application settings. Open it, then click on **Edit**.
Configure the following fields:
1. **SCIM connector base URL**: Paste the **SCIM 2.0 Base URL** value you obtained in Step 1.
2. **Unique identifier field for users**: Enter `userName`. You can copy this value below:
```text Unique Identifier theme={null}
userName
```
3. **Supported provisioning actions**: Select the following checkboxes:
* **Push New Users**
* **Push Profile Updates**
* **Push Groups**
4. **Authentication Mode**: Select **HTTP Header**.
5. **Authorization (Bearer Token)**: Paste the **OAuth Bearer Token** value you obtained in Step 1 into the field.
Click **Test Connector Configuration** to verify that the connection is working, and then click **Save**.
## Step 3: Configure Provisioning Actions
Under the **To App** section in the left sidebar of the Provisioning tab, click **Edit**.
Configure the following options and click **Save**:
* **Create Users** (Select Enable)
* **Update User Attributes** (Select Enable)
* **Deactivate Users** (Select Enable)
## Step 4: Assign Users
Once you've configured Directory Sync, you can assign users to Biqli directly within Okta. When a user is assigned to the application in Okta, their account will be automatically created in Biqli and attached to your workspace.
Click on the **Assignments** tab, and click **Assign**. You can choose to assign users individually, or assign them in bulk by group.
Select the users or groups you want to assign and click **Assign**.
On the next screen, scroll to the bottom and click **Save and Go Back**.
After this, the users you assigned will be automatically provisioned into your Biqli workspace.