Okta Provisioning Guide

Prerequisites

1. An Enterprise or Business Plus+ account with Limble CMMS
2. An Okta account set up with provisioning. https://www.okta.com/products/lifecycle-management/
3. Okta groups configured with users for Limble CMMS
4. Completed Okta OIDC Setup guide

Supported Features:

Save time and automate error-prone tasks by setting up provisioning in Okta and Limble. Once completed, you can:

• Create Users
• Create Groups
• Update User Attributes
• Update Group Attributes
• Update Group Members
• Deactivate Users
• Import Users
• Import Groups

Procedure

Step 1: Login to Limble and go “Advanced Settings” and “Manage SSO”

1. Press “Generate SCIM Token” and copy the Token that appears into your clipboard. This is the Okta “API Token.”

Step 2: Set up Okta Application to Send User Data to Limble

Here you are defining Okta’s ability to add, edit, and remove users from Limble.

1. In Okta inside of the LimbleCMMS Application, select “Provisioning”
2. Select “Integration”
3. Press the “Edit” button
4. Enable “API Integration”
5. Add the “Base URL”
   a) This will normally be: https://us-scim.limblecmms.com/scim/v2
6. Paste in the “API Token” you copied from Limble.
7. Click on “Test API Credentials”
   a) If it doesn’t work, double check your URL and Token.
   b) If that doesn’t work please contact Limble Support.
8. Press “Save”

Step 3: Set up Okta Application to Send User Data to Limble

Here you are defining Okta’s ability to add, edit, and remove users from Limble.

1. Click “To App”
2. Click “Edit”
3. Enable “Create Users”, “Update User Attributes” and “Deactivate Users”
4. Press “Save”

Step 4: Push Okta Groups to Limble

1. Find your Okta groups - by name, for example - save them, and then push them to Limble
2. Edit your users and groups as desired

Step 5: Assign Groups to Limble

1. Under “Assignments,” click “Assign” > “Groups”
2. Click “Assign” next to LimbleCMMS

Step 6: Configure Okta groups in Limble

1. After groups have been assigned and pushed, when you refresh your Limble webApp, the groups and users attached to them should appear.
2. You can then click the “+” and add roles and associated locations to each of the Okta groups.
3. These roles will then be applied to each of the group’s users. NOTE: The roles will only be editable from the Manage SSO screen.

Known Issues / Troubleshooting

1. Provisioned users need to be attached to at least one Okta group that is pushed to Limble. This is how initial SSO user permissions are assigned in Limble.
2. If you don’t see users in Limble’s user management, verify SSO users are members of an Okta provisioned group assigned to Limble.
3. We suggest naming Okta groups according to their roles and locations such as: slc-managers or timbuktu-technicians and adding the corresponding permissions in Limble.