Skip to content

Configure SCIM for MKE#

The Mirantis SCIM implementation uses SCIM version 2.0.

MKE SCIM intregration typically involves the following steps:

  1. Enable SCIM.

  2. Configure SCIM for authentication and access.

  3. Specify user attributes.

Enable SCIM#

  1. Log in to the MKE web UI.

  2. Click Admin Settings > Authentication Authorization.

  3. In the Identity Provider Integration section in the details pane, move the slider next to SCIM to enable the SCIM settings.

Configure SCIM authentication and access#

In the SCIM configuration subsection, either enter the API token in the API Token field or click Generate to have MKE generate a UUID.

The base URL for all SCIM API calls is https://<Host IP>/enzi/v0/scim/v2/. All SCIM methods are accessible API endpoints of this base URL.

Bearer Auth is the API authentication method. When configured, you access SCIM API endpoints through the Bearer <token> HTTP Authorization request header.

Note

  • SCIM API endpoints are not accessible by any other user (or their token), including the MKE administrator and MKE admin Bearer token.
  • The only SCIM method MKE supports is an HTTP authentication request header that contains a Bearer token.

Specify user attributes#

The following table maps the user attribute fields in use by Mirantis to SCIM and SAML attributes.

MKE SAML SCIM
Account name nameID in response userName
Account full name Attribute value in fullname assertion User’s name.formatted
Team group link name Attribute value in member-of assertion Group’s displayName
Team name N/A When creating a team, use the group’s displayName + _SCIM