Configure PingFederate for provisioning
About this task
To configure a connection for outbound provisioning to Evernote, follow the instructions in this section. Outbound provisioning details are managed within a service provider (SP) connection and can be added to an existing SP connection.
|
Single sign-on (SSO) is required for SCIM provisioning with Evernote. SCIM is available only in Evernote Teams accounts created on or after September 15, 2017. Learn more in How to determine when an Evernote Teams account was created in the Evernote documentation. |
Steps
-
In the PingFederate administrative console, configure the datastore that PingFederate will use as the source of user data.
Learn more in Datastores in the PingFederate documentation.
-
When targeting users and groups for provisioning, exclude the user account that you will use to administer users in your connection to Evernote. This prevents the PingFederate provisioning engine from interfering with the account that provisions users and groups.
-
-
Select the existing SP connection created in Configure PingFederate for SSO from the Identity Provider > SP Connections > Manage All menu.
-
On the Activation & Summary screen, go to Connection Type and select the Outbound Provisioning and Browser SSO Profiles checkboxes.
-
On the Outbound Provisioning screen, click Configure Provisioning.
-
On the Target screen, enter the values for each field as required by the Evernote Connector.
Target screen options Field Name Description Base URL
The base URL for Evernote.
-
https://m1.svc.evernote.com/scim/v2/
Bearer Token
The bearer token used by the connector to make authenticated API calls to Evernote. Learn more about obtaining the bearer token in Configure Evernote for provisioning.
Provisioning Options
User Create
True (default): Users will be created in Evernote.
Due to Evernote API limitations, new users cannot be created with the same username as a previously deactivated user.
False: Users will not be created in Evernote.
The
provisioner.logwill display a warning within the create user workflow that the user was not created in Evernote.User Update
True (default): Users will be updated in Evernote.
False: Users will not be updated in Evernote.
The
provisioner.logwill display a warning within the update user workflow that the user was not updated in Evernote.User Disable
True (default): Users will be disabled in Evernote.
Due to Evernote API limitations, once a user is deactivated, they cannot be reactivated with the provisioner. A deactivated user can only be reactivated in the Evernote Teams Admin Console.
False: Users will not be disabled in Evernote.
The
provisioner.logwill display a warning within the user workflow that the user was not disabled in Evernote. -
-
Click Next to continue the provisioning configuration.
Learn more in the following sections under Outbound provisioning for IdPs in the PingFederate documentation:
-
Credentials will be verified when the channel and SP connection is set to Active and provisioning is initiated.
If you are not ready to complete the provisioning configuration, you can click Save and return to the configuration page later. To return to the configuration page, select the connection from Identity Provider > SP Connections > Manage All.