Articles on: Schools & enterprise plans

Set up SCIM provisioning with OneLogin for SimplyPrint

Set up SCIM provisioning with OneLogin for SimplyPrint


This guide walks you through connecting OneLogin to SimplyPrint over SCIM, so members are created, updated, and removed in SimplyPrint automatically whenever you change them in OneLogin. You'll point your SimplyPrint app in OneLogin at SimplyPrint's SCIM base URL with a bearer token, enable provisioning, then choose who to sync.


This is the OneLogin-specific setup guide. For what SCIM does, the requirements, how tokens and the grace period work, and the activity log, read the SCIM provisioning overview first. That article is also where you copy your SCIM base URL and create a token.


Before you start

SCIM needs single sign-on set up and active first. SCIM provisions the accounts; SSO is how those people actually sign in. Set up SAML or OIDC for your account, then come back here.


A few things to have ready:


  • SAML or OIDC single sign-on is connected and active for your account. See Set up single sign-on (SSO) for SimplyPrint.
  • A School or Enterprise plan (the plans that include SSO and SCIM).
  • An account admin with permission to manage user-registration settings in SimplyPrint.
  • Admin access to your OneLogin portal, and an existing SimplyPrint app in OneLogin (the one you use for single sign-on).
  • Your SCIM base URL and a token, both from the SimplyPrint SCIM window. Open Settings, then Organization, then User registration, find the User provisioning section, and click Set up SCIM provisioning. Pick the OneLogin tab for an in-app summary of these steps, then use the Connection details section to copy the base URL and create a token.


Keep the SimplyPrint SCIM window open in one tab and the OneLogin admin portal in another. You'll copy the base URL and token from SimplyPrint into OneLogin.


Create a token in SimplyPrint

You authenticate OneLogin to SimplyPrint with a bearer token.

  1. In the SimplyPrint SCIM window, go to the Connection details section.
  2. Enter a name you'll recognize later, for example "OneLogin", and click Create token.
  3. Copy the token straight away. It's shown only once and can't be retrieved again.


Copy the token value immediately. If you navigate away before copying it, you'll need to create a new one. You can keep up to five active tokens, so revoke an old one if you hit the limit.


Enter the SimplyPrint connection details

Now switch to OneLogin and point your SimplyPrint app at SimplyPrint.

  1. In the OneLogin admin portal, go to Applications and open your SimplyPrint app.
  2. Open the Configuration tab.
  3. In SCIM Base URL, paste your SimplyPrint SCIM base URL (it ends in /scim/v2). Use the exact value from the Connection details section rather than typing it.
  4. In SCIM Bearer Token, paste the SimplyPrint token you created.
  5. Save.


OneLogin field labels can vary slightly between app templates (for example "SCIM Base URL" versus "API URL"). Match the URL field to your SimplyPrint base URL and the token field to your SimplyPrint token.


Enable provisioning

  1. In the same app, open the Provisioning tab.
  2. Tick Enable provisioning so OneLogin can create, update, and delete users in SimplyPrint.
  3. Decide how new actions are handled. If you want each create, delete, or update to wait for an admin to approve it, leave the approval options ticked; untick them to let provisioning run automatically.
  4. Save.


Choose who to provision

Provisioning only acts on people the app is assigned to.

  1. Assign the users and roles you want in SimplyPrint to the app (under the app's access or roles settings, or by mapping roles to it).
  2. Back on the Users tab of the app, OneLogin shows each user's provisioning state. New users move to Pending and then Provisioned; if you enabled approvals, approve the pending actions to push them through.


Once provisioned, your role and group memberships in OneLogin can drive SimplyPrint user groups, and on school accounts become classes. For how group names turn into user groups, permissions, and teacher status, see SAML single sign-on: user groups, group mapping, and teacher mapping. The same mappings apply to SCIM-provisioned users.


Verify it worked

Check the results in two places:


  • In OneLogin: the app's Users tab shows each user's provisioning state, and the Activity → Events log records each push and any error.
  • In SimplyPrint: scroll to the Activity section of the SCIM window. Every operation OneLogin performs - create, update, deactivate, remove, and group sync - is logged with a timestamp, the operation, who it affected, the source, and whether it succeeded. A failed operation shows a red icon you can hover for the error.


Troubleshooting

  • The connection test or first sync fails in OneLogin: confirm the SCIM Base URL is the exact base URL from the Connection details section (ending in /scim/v2) and that the SCIM Bearer Token was pasted without extra spaces. If in doubt, create a fresh token in SimplyPrint and paste the new one.
  • A user isn't appearing in SimplyPrint: check the user is assigned to the app and provisioned (not stuck in Pending awaiting approval) on the app's Users tab, and that single sign-on is still active. Look at the Activity section in SimplyPrint for a failed create operation and its error.
  • Groups aren't becoming user groups or classes: confirm the roles or groups are being sent and that your SSO group mappings match the names OneLogin sends.
  • Someone was removed who shouldn't have been: removal follows the grace period you set in SimplyPrint, and removal takes a member out of this account only - it doesn't delete their SimplyPrint account. Suspending a user in OneLogin (rather than deleting or unassigning) blocks sign-in but keeps their membership. See the grace period section in the SCIM provisioning overview.
  • Provisioning stopped after a token change: if you revoked or rotated the token in SimplyPrint, paste the new one into OneLogin's SCIM Bearer Token field. The old token no longer has access.



Updated on: 13/06/2026

Was this article helpful?

Share your feedback

Cancel

Thank you!