Okta

UltiPro User Import and Provisioning

Notes:

Contents

This guide provides the steps required to configure Provisioning for UltiPro and includes the following sections:

Features

The following provisioning features are supported:


Configuration Steps

Configure your Provisioning settings for UltiPro as follows:

  1. Check the Enable API Integration box.

  2. Enter the following:

    • Web Services URL: See Web Services Base URL for details.

    • Admin User Name: Enter a valid Admin User Name.

    • Admin Password: Enter a valid Admin Password.

    • User API Key and Customer API Key: See User and Customer API Keys for details.

    • Okta Report Path: See Okta Report Path for details.

    • Create Groups Based on User Attribute: Select one of the following: None, Org level 1, Org level 2, Org level 3, Org level 4, or Custom. See Create Groups Based on User Attributes for details.

    • Pre-Start Interval: Enter the interval in days, so that users with Hire Date ahead of current date and within this interval could be considered active and imported to Okta. For example, if you enter 7, the users with a Hire Date later than one week ahead of current date will not be imported.

    • Click Test API Credentials:

      utlipro_new1.png

  3. If your credentials are valid, you’ll see a message saying that your credentials were successfully verified.

  4. Click Save.

Notes

The following screenshot is an example of a verified UltiPro's administrative user-role that has successfully performed Okta profile master provisioning.

In this guide, all the instructions that were executed in the UltiPro instance had been executed by an administrator with such roles.

ultipro_new_a.png


Web Services Base URL

  1. Sign in to your UltiPro administrator account and navigate to SYSTEM CONFIGURATION > Web Services:

    ultipro_new_b.png

  2. The Base URL is the portion of the URL before /services... Copy the base URL for any of the endpoints.

    In the example shown below, the base URL is https://Servicet.ultipro.com:

    ultipro_new_c.png

  3. Paste this URL into the Web Services Base URL field on the Okta Provisioning Settings screen.


User and Customer API Keys

  1. Remain on the System Configuration > Web Services screen on the Security tab. The User API Key and Customer API Key are at the top of the list:

    ultipro_new_d.png

  2. Paste the two API keys into the User API Key and Customer API Key fields on the Okta Provisioning Settings screen.

Okta Report Path

Note: If you have an old UI version for IBM Cognos Report Studio click here for instructions.

  1. Click the link below to download the Okta Template in xml format. Select everything in the file and copy it to the clipboard.

    Okta_Template.xml
  2. From the top right menu, select the ADMINISTRATION tab, click Business Intelligence, then select Explore Analytics:

    Note: If you have a popup blocker enabled on your browser, you might have to disable it to view this link.

    ultipro_new_e.png


    ultipro_new_f.png

  3. On the screen that opens, select New in the lower left, and then select Report:

    ultipro_new_g.png

  4. In the Templates and themes window that opens, select Blank:

    ultipro_new_h.png

  5. The Report Studio opens. Select Pages, right click on Report, then select Open Report from clipboard:

    ultipro_new_i.png

  6. The Open Report from Clipboard windows opens. Paste all the material you copied from the xml template in step 1, above. Then, select OK:

    ultipro_new_j.png

  7. The report populates with the information from the Okta Template file:

    ultipro_new_k.png

  8. Select Save as on the main menu. Enter a file name and select Save.

    ultipro_new_l.png

  9. Within the Team content folder, create a new folder called Okta. Click on the newly created folder Okta:

    ultipro_new_aa.png

  10. Within the newly created folder Okta, name your report something that will be identifiable for later use, then click Save:

    ultipro_new_bb.png

Get a Report ID

  1. Select the recent report from the Dashboard then click on the elipsis (...) icon. Then open report Properties:

    ultipro_new_m.png

  2. To get the report ID, open Advanced:

    ultipro_new_n.png

  3. Copy the report ID. Okta Report Path field in Okta Provisioning Settings):

    ultipro_new_o.png

  4. Paste the report ID into the Okta Report Path field on the Okta Provisioning Settings screen in the following format:

    storeID[ID from screen above]

  5. ultipro_new_t.png


Alternative Approach:

  1. Navigate through the folders to the specific location where you have saved your report. In this example, we are using the folder named Okta.

  2. Click on the Team Content icon to show the folder content. Navigate to the folder where you saved your report.

    ultipro_new_p.png

  3. Click the ellipsis (...) icon. Then open report Properties:

    ultipro_new_q.png

  4. Click Advanced:

    ultipro_new_r.png

  5. Copy the report ID:

    ultipro_new_s.png

  6. Paste the report ID into the Okta Report Path field on the Okta Provisioning Settings screen:

  7. ultipro_new_t.png


Okta Report Path - Old UI Version of IBM Cognos Report Studio

  1. Click the link below to download the Okta Template in xml format. Select everything in the file and copy it to the clipboard.

    Okta_Template.xml
  2. From the top right menu, select the Administration tab, then click Business Intelligence, then select BI Administration:

    Note: If you have a popup blocker enabled on your browser, you might have to disable it to view this link.

    ultipro_a.png

  3. On the screen that opens, select Launch in the upper right, then select Report Studio,:

    utlipro_b.png

  4. On the screen that opens, select My Employees - Global View:

    ultipro_c.png

  5. The Report Studio Welcome page opens. Select Create New:

    ultipro_d.png

  6. Select Blank, then click OK:

    ultipro_e.png

  7. The Report Studio opens. Select Tools > Open Report from Clipboard:

    ultipro_f.png

  8. The Open Report from Clipboard window opens. Paste all the material you copied from the xml template in step 1, above. Then, select OK:

    ultipro_g.png

  9. The report populates with the information from the Okta Template file:

    ultipro_h.png

  10. Select Save as on the main menu. Enter a file name and select Save.

    ultipro_i.png

  11. In the first UltiPro window, select the Public Folders or My Folder for the report you just created. If you have timed out, sign in again and navigate to Business Intelligence > BI UltiPro Reports, as described in step 2, above.

  12. Click Set Properties.

    ultpro_j.png

  13. In the Set Properties window that opens, select View the search path, ID and URL.

    ultipro_k.png

  14. Copy the Search Path.

    ultipro_l.png

  15. Paste the Search Path into the Okta Report Path field on the Okta Provisioning Settings screen as CAMIDUltiProSecurity:a:e14b0b9b-34eb-48ca-88cc-5b7c7a413a85")/folder[@name='My Folders']/report[@name='okta_template']:.

    ultipro_m.png


Create Groups Based on User Attributes

If you create groups, the following operations are performed.

The following restrictions apply to all groups.

To set up groups, choose one of the options on the Create Groups dropdown menu on the Okta Provisioning Settings screen, as shown below.

Create Groups Dropdown

Important: If you are creating a Custom User Attribute, be sure to use the exact same name as the table name.


Troubleshooting Tips

If you see the following error:

Verification failed: XML reader error: javax.xml.stream.XMLStreamExeption: ParseError at[row,col]:[1,1] Message: Premature end of file

You need to change your Web Services Base URL to use the https protocol.