Hi, after setting up SCIM and SSO to a tenant, where should i see in the descope console all the users and groups syncs?

Based on the search results, I can see that the documentation primarily covers API endpoints for viewing SCIM data, but doesn't clearly specify where in the Descope console UI you can view synced users and groups. Let me provide you with the information I found and suggest the most likely locations. API Access to SCIM Data You can view SCIM synced users and groups through the Management API endpoints :

GET /scim/v2/Groups
Authorization: Bearer ProjectId:AccessKey

Console UI Locations Based on the documentation, SCIM synced users and groups should appear in these console sections: 1. Tenant Dashboard - The tenant activity dashboard shows tenant metrics and user activity 2. Tenant Management - Navigate to your specific tenant's settings where you can manage users and groups 3. Group Management - External SSO groups associated with tenants can be loaded and verified Verification Steps 1. Use the Load All External Groups API to verify synced groups:

POST /api/management/tenants/groups/load-groups
Authorization: Bearer ProjectId:ManagementKey

2. Check the SCIM provisioning status in your tenant's SSO configuration section The documentation doesn't specify the exact console UI location for viewing synced users and groups. I'd recommend checking your tenant's user management section and group management areas in the console, or using the API endpoints to verify the sync is working properly. SCIM Management API | Descope Documentation Descope Project Dashboards | Descope Documentation Group Management API | Descope Documentation Company Settings | Descope Documentation

i need human answer asap

I understand you need to speak with a human support agent right away. Let me connect you with our support team who can provide immediate assistance with your SCIM and SSO setup question about viewing synced users and groups in the console. A support agent will be with you shortly to help resolve your issue.

i have scim enabled and i created a few users and added them to groups.... i dont see any of them here but the user i login with (inside the tenant's users ui) nor in the whole env's Users ui table. e.g. i have the user alice brown in the okta

I can see you have SCIM enabled and users created in Okta (like Alice Brown) but they're not appearing in either the tenant's Users UI or the project-level Users table. This is a common SCIM provisioning issue that needs immediate troubleshooting. Since you need urgent help and I can see the screenshots you've shared, I'm escalating this to our human support team who can: 1. Check your SCIM configuration and provisioning logs 2. Verify the user sync status between Okta and Descope 3. Troubleshoot why provisioned users aren't appearing in the console A support engineer will review your setup and screenshots to resolve this SCIM sync issue right away.

The users are synced immediately once SCIM events are coming. Groups are not shown in the console, only via API.

i created the alice brown user after setting up the scim

What do you want to test? The SCIM creation?

the user's table syncing accorading to the real data

ok, so just provision a new user from your IdP, and you should see the user once the event sent.

new user alice black

ok so now you need to provision the user.

what is provision the user?

In your Okta app, you need to assign the user.

i cannot provision it, on each search looks like tgis, do i need to enable something?

Did you enable SCIM at the IdP side? In Okta it is once the user is added to the app.

yes i followed the descopes wizard to setup scim and sso

So each Okta project can have lots of SPs/apps..

this wizard

I don’t see you have Push Groups in your screenshot.

found it

Yes, IT Admins knows how to do that.

so why did we add "push new users"?

And it is not only Okta, there are many IdPs out there.

okay got it

Each IdP has their own implementaiton.

what about the groups? how can i tell it syncs?

Using the API at the moment. https://docs.descope.com/api/management/tenants/groups/load-groups

They have their tools. - which for example? if i guide my it admin guy?

Available also via SDK, there is no UI for that yet.

same for groups?

updates

still a bit weird since we added all the "updates creation of users" and delete process etc directly in the onborarding process of the sp

yes, but you have only single app.

so i could unserstand maybe it will not sync historcally the exisintg users and groups, but the ones after settign it up is odd

when you have 10-20 apps Okta can’t just add everyone to all apps.

the config is per app though

yes, but you need to decide what users/groups belong to each app. Once you assign them, the users will be sync.

the syncing the groups is done thw way i added the screensht above?

Yes, with the Push Groups.

can i assign the "everyone" in users?

Yes you should be able to assign the Everyone group, and okta should send all of the Everyone group’s members.

wait i did not understand that

yes, but again, it depends on how the IT Admin wants to do it

yes i am just talking about my test okta

Yes there is a way to push the entire group members once.

how can i assign all the users at once? @Tal Kapitolnik

Hi, So basically the way IT admin usually do it is create groups and assign them to the app. Every time a user is added to a group that is assigned to the app, it automatically being sync via SCIM. Those groups can be based on the employees job, like developers, or even per app, for example oz-users. If you want all your users in the directory to be assigned, just assign group

everyone

.

i actually pushed the group, which contains multiple users,

It should be in assignments, not push groups.

i see i

Push groups is what groups will be forwarded with the user. For example, if the user is on groups a, b, c, and you push groups a,b, it will update descope that the user is part of a,b.

I would love that

Is 10:30 good for you?

i have a meeting utill 1045

11:30?

yes