Crowd Using SCIM User And Group Provisioning For miniOrange

Step 1: Get SCIM Client Details

• In the SCIM configuration, Please enter App Name and click on the Save Settings button. Copy the SCIM Base URL and SCIM Bearer Token, these will be used later to configure the SCIM application on miniOrange.

Step 2: Setup miniOrange SCIM Configurations

Case 1: Only Provisioning (Just want to enable provisioning through miniOrange)

• Login into your miniOrange console and navigate to the Apps section.
• Go to the Apps section>>Add Application>>select Provisioning.

• Enter your Custom Application Name, SCIM Base URL and Bearer token copied from the SCIM Configuration tab of the SCIM user provisioning plugin.

• You can also send your desired attributes from your IDP to WordPress by simply adding the Target Attributes and selecting the value of those attributes in miniOrange Attributes.

Note: The following attributes are required for SCIM User Provisioning in WordPress.


• Click on Save.

Case 2: If you want provisioning using SAML

• Login into your miniOrange console and navigate to the Apps section.
• Go to Apps >> SAML/Ws-Fed apps >>WordPress ( SAML ).

• Provide a suitable Custom Application Name for your application.

Note: You can setup Single Sign-On into WordPress with miniOrange as IDP by following the steps given here.


• Navigate to the Provisioning tab and enter your SCIM Base URL and Bearer token copied from the SCIM Configuration tab of the SCIM User Provisioning plugin.

• You can also send your desired attributes from your IDP to WordPress by simply adding the Target Attributes and selecting the value of those attributes in miniOrange Attributes.

Note: The following attributes are required for SCIM User Provisioning in WordPress.


• Click on Save to save your configuration.

Step 3: User Sync Settings

• Select the User Sync Settings tab from the left sidebar. Here you can configure different settings about user creation and updation.
• You can Create the directory using Create Directory option where you want SCIM Operations to be performed.

• You can also select your Directory Type from the dropdown.

• Enable Import Users option to import all active Microsoft Entra ID (Previously known as Azure AD) Users.
• The user can be automatically enabled or disabled here based on IDP configuration.
• You also have the option to set Default Project Lead and Default Component Lead.
• Attribute mapping enables you to map your attributes sourced from the IDP to Crowd attributes. Through this section you can map your Crowd attributes to the attributes coming from IDP. By default, email corresponds to the email/mail attribute, and displayName corresponds to the full name attribute. However, if you want to map these Crowd attributes with other attributes coming from IDP, you can use this feature to change the attribute mapping configurations.

Step 4: Group Sync Settings

• Select the Group Sync Settings tab from the left sidebar. Here you can configure different settings for group creation and group mapping.

• Here you can configure Default groups for new and all users.
• You can set Manual Group Mapping or On-The Fly Group Mapping.

1. Manual Group Mapping -

• Here you can manually map Crowd groups with the groups from IDP.
• You can also configure to import IDP groups, and to keep existing users or not.

2. On-The Fly Group Mapping -

• Here users will be assigned to groups in Crowd whose group name is the same as groups from IDP. If the group doesn't exist in Crowd then it will be created.
• You can configure to keep the existing user groups.

Step 5: Backup & Restore

• In the Backup and Restore tab you can Import and Export plugin configurations in the JSON format.