Skip to content

Commit dbf902b

Browse files
add more detailed steps for HF apps
1 parent f882828 commit dbf902b

File tree

2 files changed

+21
-14
lines changed

2 files changed

+21
-14
lines changed

docs/hub/_toctree.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -397,7 +397,7 @@
397397
- local: security-sso-entra-id-scim
398398
title: How to configure SCIM with Microsoft Entra ID (Azure AD)
399399
- local: security-sso-okta-scim
400-
title: How to configure SCIM with Okta in the Hub
400+
title: How to configure SCIM with Okta
401401
- local: security-resource-groups
402402
title: Advanced Access Control (Resource Groups)
403403
- local: security-malware

docs/hub/security-sso-okta-scim.md

Lines changed: 20 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -21,12 +21,16 @@ This feature is part of the <a href="https://huggingface.co/contact/sales?from=e
2121
### Step 2: Enter Admin Credentials
2222

2323
1. In Okta, go to **Applications** and select your Hugging Face app.
24-
2. Go to the **Provisioning** tab and click **Integration** from the side nav.
25-
3. Check **Enable API Integration**.
26-
4. Enter the **SCIM Tenant URL** as the Base URL.
27-
5. Enter the **access token** you generated as the OAuth Bearer Token.
28-
6. Click **Test API Credentials** to verify the connection.
29-
7. Save your changes.
24+
2. Go to the **General** tab and click **Edit** on App Settings
25+
3. For the Provisioning option select **SCIM**, click **Save**
26+
4. Go to the **Provisioning** tab and click **Edit**.
27+
5. Enter the **SCIM Tenant URL** as the SCIM connector base URL.
28+
6. Enter "userName" for Unique identifier field for users.
29+
7. Select all necessary actions for Supported provisioning actions.
30+
8. Select "HTTP Header" for Authentication Mode.
31+
9. Enter the **Access Token** you generated as the Authorization Bearer Token.
32+
10. Click **Test Connector Configuration** to verify the connection.
33+
11. Save your changes.
3034

3135
### Step 3: Configure Provisioning
3236

@@ -50,13 +54,16 @@ This feature is part of the <a href="https://huggingface.co/contact/sales?from=e
5054
3. After finding the User or Group that needs to be assigned, click **Assign** next to their name
5155
4. In the mapping modal the Username needs to be edited to comply with the following rules.
5256

53-
> **Note:**
54-
> - Only regular characters and `-` are accepted in the Username.
55-
> - `--` (double dash) is forbidden.
56-
> - `-` cannot start or end the name.
57-
> - Digit-only names are not accepted.
58-
> - Minimum length is 2 and maximum length is 42.
59-
> - Username has to be unique
57+
<Tip warning={true}>
58+
<ul>
59+
<li>Only regular characters and `-` are accepted in the Username.</li>
60+
<li>`--` (double dash) is forbidden.</li>
61+
<li>`-` cannot start or end the name.</li>
62+
<li>Digit-only names are not accepted.</li>
63+
<li>Minimum length is 2 and maximum length is 42.</li>
64+
<li>Username has to be unique within your org.</li>
65+
</ul>
66+
</Tip>
6067

6168
5. Scroll down and click **Save and Go Back**
6269
6. Click **Done**

0 commit comments

Comments
 (0)