The Cyber Guru platform needs to store client user information to provide all Awareness, Channel, and Phishing services. User information must be created, updated, and deleted.
The exchange of such information can occur in different ways. This article outlines the prerequisites and configurations to enable this information exchange via the IdM SCIM protocol.
Identity Management SCIM (System for Cross-domain Identity Management) is an open standard protocol designed to automate the exchange of user identity information between systems. SCIM simplifies the provisioning, removal, and management of user identities across different platforms using a consistent and standardized API. It helps ensure that user data, such as names, roles, and groups, are efficiently synchronized between identity providers and service providers.
The SCIM API services offered by Cyber Guru are as follows:
-
Create: Adding new users.
-
Update: Modifying user details.
-
Delete: Removing users*
*The user on the platform will be suspended by default.
Prerequisites
1) The user's profile in the Identity Provider must contain all the attributes used by the Cyber Guru platform:
-
username
-
firstname
-
lastname
-
email
-
locale (user's language in ISO 639 two-letter lowercase format)
-
country (user's country in ISO 3166-1 alpha-2 two-letter uppercase format)
-
active
-
externalID
-
organization 1
-
...
-
organization n
2) The client has access to Microsoft Entra with admin privileges
3) In case of gamification, have an "organization" attribute set in Microsoft Entra
4) Have a policy for authorizing users to use provisioning (e.g., authorization via groups)
Configuration
The configuration of SCIM services can vary among different Identity Management providers. As SCIM is a standard protocol, Cyber Guru will provide the tenant URL and the token to be supplied with each SCIM call. The token is valid for one year.