Setting Up SCIM Provisioning and Role Mapping

This guide will walk you through how to enable SCIM (System for Cross-domain Identity Management) provisioning and set up role mapping in your LottieFiles Enterprise workspace.

Prerequisites

Before you begin, ensure the following requirements are met:

1. SCIM provisioning is only available for workspaces on the LottieFiles Enterprise plan.

2. Only Workspace Owners and Admins have permission to enable and manage SCIM provisioning and role mapping settings.

Enable SCIM Provisioning and Set Up Role Mapping

Step 1: Connect Your Domain

If your domain is already connected, you can skip this step.

• Go to Workspace Settings > Access & SSO Settings.

• On the right panel, if your domain is not connected yet, click on + Add Domain and enter your domain to initiate the connection. 

• This allows you to set up SSO with your Identity Provider (IdP), such as Okta, Azure AD, or others.
• After initiating the domain connection, you’ll be redirected to the Integration page. Follow the step-by-step instructions provided based on your IdP.
  
  

Step 2: Enable SCIM Provisioning

• Scroll down to Login & Provisioning > SCIM Provisioning.

• Toggle the switch to Enable SCIM provisioning.

Step 3: Complete Role Mapping Configuration

• Once SCIM Provisioning and Directory Sync are enabled, click the Role Mapping button.
  

Step 4: Select Groups and Assign Roles

• On the Role Mapping page, you’ll see a list of groups from your directory.

• Select the groups you want to sync to LottieFiles.

• Assign the appropriate role to each group.
  
  

Example:
You might have a group called Admins in your directory that you want to assign Admin access to in LottieFiles.
Some organizations prefer to create a custom group specifically for LottieFiles and sync only that group.

Troubleshooting

If your groups do not appear in the account settings and you are unable to complete the role mapping, please refer to this article: Missing Groups in Role Mapping.

If you're experiencing SCIM provisioning role mismatch issues, please refer to the following article for troubleshooting steps: Troubleshooting SCIM Provisioning Role Mismatch Issues.

Need Help?

If you encounter any issues or have questions during the setup process, please contact our support team at support@lottiefiles.com.

To expedite the investigation, provide the following relevant information:

• The affected user’s email address.
• Expected role from the identity provider.
• The actual role assigned in the workspace (if any).
• Screenshot or logs from your IdP showing role attributes.
• Confirmation of whether the user was added before or after SCIM was enabled.
• Any error messages received during provisioning.
• Confirmation of available seat allocation for the role.

Updated April 17, 2025 15:54