1. Help Center
  2. Administration
  3. SCIM

How to configure SCIM with OneLogin

You can use SCIM provisioning to manage users in Calendly with OneLogin. With SCIM you can:

  • Create users
  • Update user attributes (like name and email)
  • Deactivate and delete users.

Changes in OneLogin will automatically sync to Calendly. SCIM is only available on the Enterprise plan. Contact your Account Executive or Calendly Sales to learn more.

Before you begin

Make sure you meet these requirements before you set up SCIM:

  • You must configure and enforce SAML SSO. 
  • You must be a Calendly owner or admin.
  • Open Calendly in one browser window and OneLogin in another for easier setup. 

Enable SCIM provisioning

  1. In Calendly, go to Account > Organization Settings > Single sign-on.
  2. Under Optional: Connect SCIM, toggle on SCIM provisioning.

Add details to OneLogin

  1. In OneLogin, go to Applications > Applications.
  2. Search for the Calendly app and select it.
  3. In the left menu, select Configuration. 
  4. In Calendly, select Copy Base URL. In OneLogin, paste it in the SCIM Base URL field. 
  5. In Calendly, select how long the token should last. 
  6. Select Generate new bearer token.
  7. In Calendly, select Copy token and paste it in OneLogin in SCIM Bearer Token.
  8. In OneLogin, select Enable.
  9. Select Save.
Calendly value OneLogin field
Base URL SCIM Base URL
Bearer/API token SCIM Bearer Token

Add parameters in OneLogin

  1. In OneLogin, go to the Parameters tab.
  2. Select SCIM Username.
  3. Set Value to Email.
  4. Select Save.

Enable provisioning in OneLogin

  1. In OneLogin, go to Provisioning. 
  2. Under Workflow, select Enable provisioning. 
  3. Under Require admin approval before this action is performed, choose the appropriate values:
    • Create user:
      • If selected, admins must approve new users before they can login.
      • If not selected, users are created automatically when they are assigned the application.
      • In either case, users will get an invitate email to join Calendly and must accept the invite before logging in. 
    • Delete user:
      • You must approve deletion. ⚠️
      • Because deleting a user is a non-reversible action, you should require admin approval, and keep this box checked.
    • Update user:
      • You must approve any updates in OneLogin.
  4. Under When users are deleted in OneLogin, or the user's app access is removed, perform the below action, select Suspend.

    Note: ⚠️ While Calendly does support delete-based de-provisioning, select delete with caution. Once a user has been deleted, Calendly will delete their account and all their data. This is a non-reversible action.

  5. Select Save.

Approve users

  1. In OneLogin, go to Applications > Calendly > Users. 
  2. Check that the correct Calendly users are listed.
  3. To approve all users, select Bulk approve X pending logins for the same app, then select Approve.
    • Alternatively, you can individually approve each pending user. If you do not approve a user, the user won’t be able to log in to Calendly.
  4. If some users are not Pending, select Apply to all, then Reapply Mappings.

Note: To check the provisioning logs, go to Users > Provisioning. Under All Apps, select Calendly.

Assigning groups in Calendly

For larger organizations, managing group membership in Calendly may require some level of automation. This can be achieved through SCIM by utilizing existing attributes of a user’s profile and mapping that value to a Calendly group. Read more about how to use groups here.

OneLogin does not currently support custom attributes for catalog applications. An update request has been made to OneLogin to support the proper attribute needed to support this feature. In the meantime, OneLogin does support a standalone SCIM application that does support custom attributes. Please follow our Generic SCIM documentation on how to configure this.

Was this article helpful?