By: Sayali Chavan user 05 Aug 2022 at 7:24 a.m. CDT

6 Responses
Sayali Chavan gravatar
We have a product called Secret Server which is SCIM 2.0 enabled and could be integrated with any other SCIM enabled application. We learnt that Gluu is also an SCIM enabled application so wanted to test its integration with Secret Server. We have setup the server on windows but not able to find out how we can integrate Gluu with Secret Server . Can you please help us how we can configure it so that we can verify the integration ? Regards, Swapnil Supekar

By Aliaksandr Samuseu staff 05 Aug 2022 at 8:11 a.m. CDT

Aliaksandr Samuseu gravatar
Hi, Sayali. >We have setup the server on windows but not able to find out how we can integrate Gluu with Secret Server Do you mean your product ("Secret Server") was installed on windows? Otherwise, please elaborate (Gluu Server doesn't support Windows naturally). Overall, assuming you're already familiar with SCIM (as protocol), it should be fairly simple to integrate your app with Gluu Server. I would recommend to start with protection mode set to "TEST" or "BYPASS, it will make calling SCIM endpoints easier as you won't need to deal with UMA (you can read about UMA [here](https://docs.kantarainitiative.org/uma/rec-uma-core.html)). You can find how to enable test mode [here](https://gluu.org/docs/gluu-server/4.4/user-management/scim2/#protection-using-test-mode). I would suggest to read this doc page completely, it should answer most of your questions on how to use SCIM with Gluu: [link](https://gluu.org/docs/gluu-server/4.4/user-management/scim2/). You also could check [this article](https://gluu.org/docs/gluu-server/4.4/user-management/scim-scripting/) about SCIM custom scripts as an advanced reading topic. Also, you specified 4.0 as your Gluu Server version - that's rather old, if it's a fresh installation, please use the most latest package available (4.4 I believe).

By Sayali Chavan user 05 Aug 2022 at 8:24 a.m. CDT

Sayali Chavan gravatar
Hi Aliaksandr , Yes we have installed Secret server on windows server. We have a SCIM Connector where we can generate non -expiry token which can be used for provisioning with the SCIM complaint application ( In this case Gluu Server ). Below is our test scenario : 1.We wanted to test whether we can connect Gluu with Secret Server using the token and how ? 2.If we are able to connect using SCIM then we wanted to test the provisioning of user /groups from Gluu Server to Secret Server. Please let us know if the above mention scenario is possible to test ?

By Aliaksandr Samuseu staff 05 Aug 2022 at 8:45 a.m. CDT

Aliaksandr Samuseu gravatar
Yes, it should be possible. After switching protection mode to test mode you'll be able to generate a short-living access token which you'll have to use in subsequent queries to Gluu's SCIM API. The document I referenced explains the process and shows examples of such queries.

By Sayali Chavan user 08 Aug 2022 at 2:44 a.m. CDT

Sayali Chavan gravatar
Hi Aliaksandr, I have refered the doc you mentioned earlier to enable the protection mode. But i am not able to find the protection mode under SCIM Properties to enable it. Can you please help to setup the configuration for SCIM Integration ? Is it possible to have a call tommorrow to discuss about it ?

By Mohib Zico staff 16 Aug 2022 at 11:12 p.m. CDT

Mohib Zico gravatar
>> Is it possible to have a call tommorrow to discuss about it ? Unfortunately, support call is only covered in subscription. Thanks!

By Aliaksandr Samuseu staff 01 Sep 2022 at 4:34 p.m. CDT

Aliaksandr Samuseu gravatar
Hi, Sayali. Sorry for the late response. > But i am not able to find the protection mode under SCIM Properties to enable it. Sorry, my mistake - I was missed the fact you specified 4.0 as your version.. The property you need was named differently back then, you need to check [this doc](https://gluu.org/docs/gluu-server/4.0/user-management/scim2/#protection-using-test-mode) instead. So you need to search for "scimTestMode" property and set it to "true". Then also enable the script it tells you to enable. I would also consider upgrading your 4.0 instance asap - the current version is 4.4 - and it's seen major improvements and security enhancements.