Requirements
Your Hive workspace needs the Enterprise Security add-on.
You must be a System Admin in the workspace. Hive accepts SCIM requests only with a System Admin's API key.
Use the same Hive app from the Okta Integration Network that you use for SAML SSO. See Setting up SAML 2.0 with Okta.
In Okta, on the Sign On tab, set Application username format to Email. Hive uses the username as the user's email address.
Configuration Steps
In Okta, open the Hive app. On the Sign On tab, click Edit. Under Advanced Sign-on Settings, enter your Workspace ID and click Done. If you set up SAML with this app, the Workspace ID is already there.
To find your Workspace ID in Hive, click your avatar, select My profile, and then select API info. Keep this page open. You need the API Key in a later step.
On the Provisioning tab, click Configure API Integration.
Select Enable API integration. In API Token, paste the API Key from the Hive API info page. Click Test API Credentials, and then click Save.
On the Provisioning tab, select To App, and then click Edit. Enable:
Create Users (leave Set password when creating new users cleared)
Update User Attributes
Deactivate Users
Click Save. Hive does not sync passwords.
When you deactivate a user in Okta or unassign the app, Hive removes the user from your workspace. Hive does not delete their Hive account. If you assign the app to them again, Hive adds them back.
Attributes and Mapping
Hive reads only these attributes:
userName (must be an email address): the user's email in Hive
name.givenName: first name (required)
name.familyName: last name (required)
Hive ignores all other attributes, including the separate email attribute. Hive also saves Okta's external ID, so a user whose email changes stays the same Hive user.
Supported Features
Create users
Update user attributes
Deactivate users
Import users
Import groups
Group push: each pushed group becomes a team in Hive. If a team with the same name already exists, Hive uses that team and replaces its members with the group members from Okta.