Provision Lightrun roles with SCIM for SAP IAS¶

Lightrun version 1.51.3 for on-premise deployments supports mapping IDP roles to Lightrun roles when working with SCIM provisioning using SAP Identity Authentication Service (IAS).

You can assign the following Lightrun roles:

• ROLE_MANAGER
• ROLE_USER
• ROLE_IGNORE_QUOTA

Enable SCIM role support in Lightrun¶

You can enable SCIM role support in the Lightrun Management Portal.

1. Log in to your Lightrun account.
2. Navigate to Identity and Access Management > Identity Configuration > Provisioning.
3. Select Use Identity Provider.

4. Enable SCIM by selecting SCIM - System for Cross-Domain Identity Management.

   

5. Select Provision user roles to transfer Lightrun role management to users.

6. Click Save

Proceed to provision Lightrun roles in SAP IAS.

/Schemas endpoint for mapping Lightrun roles¶

Lightrun supports the /Schemas endpoint, which is used by SCIM to map SAP IAS user roles to Lightrun roles. This ensures seamless role-based access control by assigning the appropriate Lightrun roles based on roles provisioned in SAP IAS.

Request example¶

{
      "schemas": [
        "urn:ietf:params:scim:schemas:core:2.0:User"
      ],
      "userName": "exampleUser@companyOfjohn.com",
      "name": {
        "familyName": "B",
        "givenName": "John"
      },
      "preferredLanguage": "en",
      "active": true,
      "roles": [
        {
          "value": "ROLE_USER",
          "display": "ROLE_USER",
          "type": "ROLE_USER"
        },
        {
          "value": "ROLE_MANAGER",
          "display": "ROLE_MANAGER",
          "type": "ROLE_MANAGER"
        }
      ]
    }

Request parameters¶