How to provision Zoom users with Okta

Provisioning Zoom users with Okta involves setting up Okta as your identity provider and configuring SCIM (System for Cross-domain Identity Management) to automate user creation, updates, and deactivation in Zoom. This guide outlines the steps necessary to integrate Zoom with Okta for streamlined user management. The key steps involve adding the Zoom application to Okta, configuring the SCIM integration, and assigning users or groups to the application.

Prerequisites

• A Zoom Business or Enterprise account.
• An Okta account with administrator privileges.
• A configured Okta tenant.
• A Zoom API key and secret or OAuth App (SCIM).

Step 1: Add the Zoom Application to Okta

1. Log in to your Okta admin dashboard.
2. Navigate to Applications > Applications.
3. Click Browse App Catalog.
4. Search for “Zoom” and select the Zoom application.
5. Click Add Integration.
6. On the General Settings tab, configure any desired settings, such as application visibility, and click Next.
7. On the Sign-On Options tab, select your preferred sign-on method (SAML 2.0 is common), and click Done.

Step 2: Configure the Zoom Application for SCIM

1. In the Okta admin dashboard, navigate to the Zoom application you just added.
2. Click on the Provisioning tab.
3. Under Settings, click Integration.
4. Click Edit.
5. Select the Enable API Integration checkbox.
6. Choose authentication method.
   • API Key:
     • For API Key, enter your Zoom API Key and API Secret. You can obtain these credentials from the Zoom Marketplace by creating a Server-to-Server OAuth app with the user:read:admin, user:write:admin, group:read:admin, group:write:admin scopes.
     • Click Test API Credentials to ensure the connection is successful.
   • OAuth App:
     • For OAuth App, click Authenticate with Zoom button.
     • You will be redirected to Zoom to authorize the Okta application.
     • After authorization, you’ll be redirected back to Okta.
7. Click Save.
8. Under Settings, click To App.
9. Click Edit.
10. Enable the following provisioning features as needed:
    • Create Users: Allows Okta to create new Zoom users.
    • Update User Attributes: Allows Okta to update user attributes in Zoom (e.g., email, first name, last name).
    • Deactivate Users: Allows Okta to deactivate users in Zoom when they are deactivated in Okta.
    • Sync Password: Allows Okta to synchronize Zoom user passwords
11. For each enabled feature, specify the appropriate attribute mappings. Default mappings are usually sufficient, but you may need to customize them based on your Okta user profile attributes. Common attributes include: * userName (Okta) to email (Zoom) * name.givenName (Okta) to firstName (Zoom) * name.familyName (Okta) to lastName (Zoom)
12. Set the Zoom License Type to the appropriate license for your organization (e.g., Basic, Licensed) or select the attribute mapping to define this value dynamically.
13. Set the Zoom User Type to the appropriate user type (e.g., User, On-Premise). Consult your Zoom representative about managing On-Premise users.
14. Click Save.

Step 3: Assign Users or Groups to the Zoom Application

1. In the Okta admin dashboard, navigate to the Zoom application.
2. Click on the Assignments tab.
3. Click Assign and choose either Assign to People or Assign to Groups.
4. Select the users or groups you want to provision to Zoom.
5. Click Assign.
6. For each user, review and customize the attribute values that will be passed to Zoom (if necessary).
7. Click Save and Go Back.
8. Click Done.
9. The assigned users will now be provisioned to Zoom. This may take a few minutes to complete.

Step 4: Verify User Provisioning in Zoom

1. Log in to your Zoom admin portal.
2. Navigate to User Management > Users.
3. Verify that the users you assigned in Okta have been created in Zoom with the correct attributes.
4. Confirm that user deactivation in Okta correctly deactivates the user in Zoom.

Common Issues

• API Credentials Invalid: Double-check your Zoom API Key and API Secret (or OAuth App credentials) in Okta. Ensure the Zoom app permissions are correct (especially for the Server-to-Server OAuth app approach). Regenerate the credentials if necessary and update them in Okta.
• Attribute Mappings Incorrect: Review your attribute mappings in the Okta Zoom application settings. Ensure the correct Okta attributes are being mapped to the corresponding Zoom attributes. Pay special attention to required attributes like email, firstName, and lastName.
• Users Not Provisioning: Check the Okta System Log for errors related to the Zoom application. These logs can provide detailed information about provisioning failures, such as invalid attribute values or API errors. Ensure that the users being provisioned have all required attributes populated in Okta.
• License Conflicts: Ensure you have enough Zoom licenses available for all users being provisioned. If a user cannot be provisioned due to a license shortage, adjust your license allocation or purchase additional licenses.
• Group Provisioning Issues: If you are provisioning users via Okta groups, ensure that group push is configured correctly in Okta. Verify that the Zoom app is configured to receive group assignments from Okta.