CLOR helpDirectory sync (SCIM 2.0)
Your identity provider adds, updates and removes people in CLOR automatically.
Accounting → Settings → Single sign-on → Directory sync. Choose the role new people get (or none, to assign later) and make a token — it is shown once.
Microsoft Entra
- Enterprise applications → your CLOR app → Provisioning → Automatic.
- Tenant URL:
https://api.clor.in/scim/v2. Secret token: the one CLOR showed. Test connection. - Map userName to the user's e-mail (userPrincipalName or mail), then assign users or groups and start provisioning.
Okta
Application → Provisioning → Integration: SCIM connector base URL https://api.clor.in/scim/v2, unique identifier userName, authentication HTTP header with the token. Enable Create, Update and Deactivate.
What is supported
| Operation | Effect in CLOR |
|---|---|
| Create user | A user with that e-mail, a member of your company, with the token's role. If the e-mail already exists in CLOR they join your company instead. |
| Update / replace | Name and e-mail follow the provider. |
| active = false | The login is switched off (only for people of your account). |
| Delete | Removed from your company; switched off if they had nowhere else to sign in. |
| Groups | Not provisioned. Roles are assigned in CLOR. |
Filters supported: userName eq "…", emails eq "…". Discovery at /ServiceProviderConfig, /ResourceTypes, /Schemas.
Active Directory without a cloud identity provider: the on-site connector syncs it over the same SCIM endpoint.