Setting up SCIM provisioning in PingIdentity

Configure SCIM (System for Cross-domain Identity Management) standard for your team or district using PingIdentity.

• Create users - Users in Ping Identity assigned to the Canva App are added as members of the organization in Canva.
• Update user attributes - Updates made to the user's profile through PingIdentity will be pushed to Canva.
• Deactivate users - Deactivating the user through PingIdentity will lock the user in Canva.

1. Under Connections, go to Provisioning.
2. Click the plus icon.
3. Select Identity Store.
4. Enter SCIM in the search box and click Select.
5. Enter a fitting name and description. Then, click Next.
6. Enter the following information you obtain from Canva during Step 1 of SCIM provisioning.
   • Users Resource: /Users
   • Authentication method: OAuth 2 Bearer Token
   • OAuth Access Token field: Paste the token copied from Canva.

7. Click Test Connection.
8. If everything is set up correctly, you should see a “Connection successful” message. Click Next.
9. Under Remove Action, click on the dropdown menu and select Disable. This will lock a user on Canva. Deprovision on Rule Deletion is optional. You may click on the question mark icon next to it to understand the implications.

10. Click Finish.
11. Finally, Enable the SCIM connection by switching the toggle on.

Now that a SCIM connection has been established, we'll set up rules or attribute mapping.

1. On PingIdentity, go to Provisioning.
2. Click the plus button and select New Rule.
3. Enter a fitting name and click Create Rule.
4. Select the connection established earlier and click Save.
5. Edit the user filters as per your organization’s requirements. As of writing, PingIdentity doesn't support wildcards for user filter. User filter decides which users will get access to the Canva app.
6. Edit the attributes as shown below.

7. Click Save.
8. Enable the new rule by toggling the switch on.

Congratulations! You've now successfully enabled SCIM provisioning.

You may view the event logs at your PingIdentity account. Go to Environment and select Audit.