This project is based on okta-scim-flask-example and the guidance of the Okta blog post How to Build a Flask SCIM Server Configured for Use with Okta.
There are some issues with running the Flesk server in an environment with Python >3.10. As it's not easy to prepare an environment with the right version of Python and the relative dependencies, I used a Docker Compose in order to make very quick the startup of the SCIM Server.
Clone (or download) the repository at https://github.com/fabiograsso/okta-scim-server-docker-compose
config/ngrok.yml with the ngrok Authtoken (otherwise the ngrok session will be limited to 2 hours)
To start the SCIM Server, execute the following:
make start
The ngrok URL is outputted in the console after the startup. Then you can follow the instruction of the blog post How to Build a Flask SCIM Server Configured for Use with Okta, to create and configure the application in Okta.
Remember that the free version of ngrok uses dynamic URLs, so at every execution of the server, the public URL will change and must be updated in the Okta configuration.
Port 5000 is already in use on OSX, so I used the follwing port:
| URL/PORT | Description |
|---|---|
| http://localhost:5001 | ngrok console |
| http://localhost:5002 | Adminer (for checking the db content) |
| http://localhost:5003 | Okta Scim Server (for local debugging and testing) |
| localhost:5004 | PostgresSQL Database |
The Postgres data folder is saved in data/postgresql in order to make the db persistent. To start from scratch, delete the folder.
You can test the app by running:
curl -XGET -H 'Authorization: Bearer 123456789' -H "Content-type: application/json" 'http://localhost:5004/scim/v2/Users'
for localhost access, and:
curl -XGET -H 'Authorization: Bearer 123456789' -H "Content-type: application/json" 'https://xyz.ngrok-free.app/scim/v2/Users'
for public access (remember to change the ngrok URL with your)
If you want to check the database content, you can open Adminer http://localhost:5002 with the following parameters:
- System: PostgreSQL
- Server: db
- Username: root
- Password: root
- Database: scim
Docker and Docker Compose
A Makefile is present in order to create some shortcuts for common operations.
Usage:
| Command | Description |
|---|---|
make start |
Start docker-compose (in background) |
make stop |
Stop docker-compose |
make restart |
Restart docker-compose |
make logs |
Show the last 500 logs and start tail -f |
make start-logs |
Start docker-compose with logs |
make restart-logs |
Restart docker-compose with logs |
make build |
Rebuild all docker images |
This project is only for testing purposes. No kind of security is implemented (i.e. PostgreSQL runs with trust authentication enabled).
| Folder | Description |
|---|---|
okta-scim-server |
Custom docker image used in this project |
config |
Configuration files |
Python 3.10 image with a copy of okta-scim-flask-example.
I changed the db hostname from localhost to db and created a startup.sh file, in order to run the database preparation scripts.