Calendly supports SCIM provisioning with OneLogin. From OneLogin, you can create users, update user attributes (like name and email), deactivate users, and delete users. These changes will automatically sync to Calendly. SCIM is only available on the Enterprise plan. Contact your Account Executive or Calendly Sales to learn more.
Before you begin
- You must configure and enforce SAML SSO before you can can set up SCIM.
-
To configure SCIM, you must be a Calendly owner or admin.
-
For easier setup, use separate browser windows: one for Calendly and one for OneLogin.
Step 1 - In Calendly, enable SCIM provisioning
-
In Calendly, go to Account, Organization Settings, then Single sign-on.
-
Under Optional: Connect SCIM, toggle on SCIM provisioning.
Step 2 - Add details to OneLogin
-
In OneLogin, go to Applications, then Applications.
-
Search for the Calendly application and select it.
-
Select Configuration in the lefthand sidebar.
-
In Calendly, select Copy Base URL, and paste it in OneLogin in SCIM Base URL, replacing the placeholder value.
-
In Calendly, select the appropriate token expiration for When do you want this token to expire?
-
Select Generate new bearer token.
-
In Calendly, select Copy token and paste it in OneLogin in SCIM Bearer Token.
-
In OneLogin, select Enable.
-
Select Save.
| Calendly value | OneLogin field |
| Base URL | SCIM Base URL |
| Bearer/API token | SCIM Bearer Token |
Step 3 - Add parameters in OneLogin
- In OneLogin, select the Parameters tab.
- Select SCIM Username.
- Set Value to Email.
- Select save.
Step 4 - Enable provisioning in OneLogin
-
In OneLogin, select Provisioning in the lefthand sidebar.
-
Under Workflow, select Enable provisioning in the checkbox.
-
Under Require admin approval before this action is performed, choose the appropriate values:
Create user - If you select create user, you must approve users in OneLogin before they can log in to Calendly. If you don't select this, OneLogin will automatically create a user in Calendly when they are assigned the application. In either case, once a user is created, they will receive an invitation email to join Calendly. They must accept the invite before they can log in.
Delete user - If you select delete user, you must approve deletion. ⚠️ Because deleting a user is a non-reversible action, you should require admin approval, and keep this box checked.
Update user - If you select update user, you must approve any updates in OneLogin.
-
Under When users are deleted in OneLogin, or the user's app access is removed, perform the below action, select Suspend.
Note: ⚠️ While Calendly does support delete-based de-provisioning, select delete with caution. Once a user has been deleted, Calendly will delete their account and all their data. This is a non-reversible action.
-
Select Save.
Step 5 - Approve users
-
In OneLogin, go to Applications, Calendly, then Users. Ensure the correct Calendly users are listed.
- To approve all users, select Bulk approve X pending logins for the same app, then select Approve. Alternatively, you can individually approve each pending user. If you do not approve a user, the user won’t be able to log in to Calendly.
-
If some users are not Pending, select Apply to all, then Reapply Mappings.
Note: To check the provisioning logs, go to Users, then Provisioning. Under All Apps, select Calendly.
Assigning groups in Calendly
For larger organizations, managing group membership in Calendly may require some level of automation. This can be achieved through SCIM by utilizing existing attributes of a user’s profile and mapping that value to a Calendly group. Read more about how to use groups here.
OneLogin does not currently support custom attributes for catalog applications. An update request has been made to OneLogin to support the proper attribute needed to support this feature. In the meantime, OneLogin does support a standalone SCIM application that does support custom attributes, please follow our Generic SCIM documentation on how to configure this.