Step 4. Test Your SCIM

Now that you have your SCIM test app configured and connected to your SCIM implementation, trigger user provisioning to test the flow. We recommend that you trigger user provisioning by adding a user to a role that has access to your SCIM test app.

Configure Provisioning for Your SCIM Test App

  1. Access the **Provisioning** tab for your SCIM test app. Ensure that the ** Enable provisioning for ** option is selected.
  2. Under **Require admin approval before this action…**, select the **Create user**, **Delete user**, and **Update user** options. We recommend that you test with these options selected because this will create a queue of provisioning requests that you can monitor and control individually as you test and troubleshoot. See [Understanding OneLogin Provisioning Calls to Your SCIM API](#understandingapicalls) for more details. Provisioning settings in OneLogin Alternatively, clear the **Create user**, **Delete user**, and **Update user** options if you want OneLogin to provision new users and user updates to your SCIM test app without requiring administrative approval.
  3. In the **When users are deleted in OneLogin…** drop-down, select the action you want to test: **Delete**, **Suspend**, or **Do Nothing**.
  4. Select **SAVE**.

    5. Trigger Provisioning for Your SCIM Test App

    1. Access the **Access** tab for your SCIM test app. Make a note of a value in the **Roles** section as shown below. You will assign this role to a user to start the provisioning process. SCIM access configuration
    2. Go to **USERS** > **All Users**. Search for and select the user you want to provision to your SCIM test app.
    3. Select the **Applications** tab for the user.
    4. In the **Roles** menu, select the role name you identified in step 1.
    5. Select **SAVE** to start the provisioning process.
    ## Review and Approve Provisioning Tasks for Your SCIM Test App For any user provisioning actions for which you selected options in [Configure Provisioning for Your SCIM Test App](#configureprov), you must review the provisioning task and approve it before actual provisioning can take place. ***To review and approve provisioning tasks:***
    1. Log in as an admin and go to **USERS** > **Provisioning** to view the provisioning tasks in a queue requiring your approval.
    2. Select a **Tasks** row and manually **APPROVE** or **IGNORE** each provisioning action, as appropriate. Ignore or approve provisioning actions
    3. Monitor provisioning progress by accessing the **Users** tab for your SCIM test app. Provisioning progress indicator
    4. Select a row to access details of the provisioning state. For example, select **failed** to view a reason for the failure and to **RETRY** the provisioning task. Provisioning retry dialog

    Understanding OneLogin Provisioning Calls to Your SCIM API

    1. Provisioning starts with OneLogin making a call to your Get User Resource by userName API for each user that has been given access to the app to determine if the user needs to be created or updated in your app.
    2. If the user exists, OneLogin makes a call to your Update User Resource by ID API to make any necessary modifications, such as licenses, roles, and entitlements. To confirm that the update was made to the user, your API response should include the updated user.
    3. If the user does not exist, OneLogin makes a call to your Create User Resource API to create the user with all appropriate attributes and entitlements. To confirm that the user was created, the API response should include the created user.

    For more information about SCIM API implementation details, see Step. 2 Implement RESTful SCIM APIs for Your App.