Prerequisites
- An Enterprise or Business Plus+ account with Limble CMMS
- An Okta account set up with provisioning. https://www.okta.com/products/lifecycle-management/
- Okta groups configured with users for Limble CMMS
- Completed Okta OIDC Setup guide
Supported Features:
Save time and automate error-prone tasks by setting up provisioning in Okta and Limble. Once completed, you can:
- Create Users
- Create Groups
- Update User Attributes
- Update Group Attributes
- Update Group Members
- Deactivate Users
- Import Users
- Import Groups
Procedure
Step 1: Login to Limble and go “Advanced Settings” and “Manage SSO”
- Press “Generate SCIM Token” and copy the Token that appears into your clipboard. This is the Okta “API Token.”
Step 2: Set up Okta Application to Send User Data to Limble
Here you are defining Okta’s ability to add, edit, and remove users from Limble.
- In Okta inside of the LimbleCMMS Application, select “Provisioning”
- Select “Integration”
- Press the “Edit” button
- Enable “API Integration”
- Add the “Base URL”
a) This will normally be: https://us-scim.limblecmms.com/scim/v2 - Paste in the “API Token” you copied from Limble.
- Click on “Test API Credentials”
a) If it doesn’t work, double check your URL and Token.
b) If that doesn’t work please contact Limble Support. - Press “Save”
Step 3: Set up Okta Application to Send User Data to Limble
Here you are defining Okta’s ability to add, edit, and remove users from Limble.
- Click “To App”
- Click “Edit”
- Enable “Create Users”, “Update User Attributes” and “Deactivate Users”
- Press “Save”
Step 4: Push Okta Groups to Limble
- Find your Okta groups - by name, for example - save them, and then push them to Limble
- Edit your users and groups as desired
Step 5: Assign Groups to Limble
- Under “Assignments,” click “Assign” > “Groups”
- Click “Assign” next to LimbleCMMS
Step 6: Configure Okta groups in Limble
- After groups have been assigned and pushed, when you refresh your Limble webApp, the groups and users attached to them should appear.
- You can then click the “+” and add roles and associated locations to each of the Okta groups.
- These roles will then be applied to each of the group’s users. NOTE: The roles will only be editable from the Manage SSO screen.
Known Issues / Troubleshooting
- Provisioned users need to be attached to at least one Okta group that is pushed to Limble. This is how initial SSO user permissions are assigned in Limble.
- If you don’t see users in Limble’s user management, verify SSO users are members of an Okta provisioned group assigned to Limble.
- We suggest naming Okta groups according to their roles and locations such as: slc-managers or timbuktu-technicians and adding the corresponding permissions in Limble.