Repository for HelloID Provisioning Target Connector to Zenya using the SCIM API

• HelloID-Conn-Prov-Target-Zenya
  • Table of Contents
  • Requirements
  • Introduction
    • SCIM based API
    • Available actions
    • Mapping
    • Correlation
  • Getting started
    • Create Provider in Zenya
    • Allowing user and groups created by Zenya to be returned in the SCIM service
    • Connection settings
    • Remarks
  • Getting help
  • HelloID docs

• SSO configured on Zenya environment
• Required to run On-Premises since it is not allowed to import a module with the Cloud Agent.
• A Registered Provider in Zenya. Please see the Zenya Documentation (step 3) for the "How To": Create Provider in Zenya.
  • Service Address
  • Client ID
  • Client Secret
• Concurrent sessions in HelloID set to a maximum of 2! Exceeding this limit may result in timeout errors, as the Zenya SCIM API supports only a specific number of requests per minute.

For this connector we have the option to create and manage Zenya user accounts and groups.

SCIM stands for System for Cross-domain Identity Management. It is an open standard protocol that simplifies the management of user identities and related information across different systems and domains. For more information, please see: http://www.simplecloud.info

The HelloID connector uses the API endpoints listed in the table below.

The HelloID connector consists of the template scripts shown in the following table.

The mandatory and recommended field mapping is listed below.

Please follow the Zenya Documentation (step 3) to Create a Provider in Zenya

By default, ONLY groups and users created by the identity provider or linked to it are returned in the SCIM service. However, there is a setting that Infoland can enable per provider, allowing the users and groups created by Zenya to be returned as well. If users/groups come from multiple sources (ADs, created within Zenya itself), please contact Infoland to ensure that the SCIM service returns everything, not just the users/groups synchronized through this process. For more information, please see (step 7): https://webshare.zenya.work/DocumentResource/709a648d-6300-4e42-a2a6-54ae02201873/Document.pdf?webshareid=y491fqpfwxhoo0kd&showinlinepdf=1

The following settings are required to connect to the API.

• Infoland must define the current users within the synchronization scope. Failure to do so will result in every person being assigned a new user account.
• Since we use the SCIM API, we cannot create/set the password of users, so Single Sign-On (SSO) is required to manage the users using the SCIM API.
• Currently, we can only manage groups we actually created with HelloID. So only the groups we created through HelloID Resource Creation.
  • Note that HelloID can only create groups. The groups will not be deleted by HelloID.
• Currently, we can only set a department that already exists in Zenya.
  • For this, all departments must have a unique name (we can only match on name, so matching on code or any other field is not possible) within the entire tree (i.e., no duplicate names anywhere).
  • In addition, maintenance of the departments (i.e., creating/deleting as well as setting the owner) will need to take place within Zenya.
• Currently, we can only set a manager that exists in Zenya and has been created by HelloID. For this, HelloID has to have granted the Account entitlement for the manager first.

For more information on how to configure a HelloID PowerShell connector, please refer to our documentation pages

If you need help, feel free to ask questions on our forum

The official HelloID documentation can be found at: https://docs.helloid.com/