Configuring your external IDP with OCI IAM

If configuring an external identity provider, we recommend that you set up a SAML external identity provider for authentication and authorization while using the SCIM (System for Cross-domain Identity Management) protocol for user lifecycle management. We recommend reviewing these topics:

• Creating an External SAML identity provider
• Creating and configuring identity provider policies
  • SAML and SCIM with Microsoft Entra
  • SAML and SCIM with Okta
  • For other IDPs, you can provision into your Identity Domain using a Confidential App in your Identity Domain and then configuration within your IDP. Consult with your IDP support team as needed.

If your IDP can support sending the studentID attribute as a string array data type, another option is to use Just-in-time provisioning with a SAML identity provider.