Generate API Credentials

To integrate SCIM with Skyhigh, generate the API credentials from the Skyhigh SSE and add them to the IdP when prompted to establish a connection between Skyhigh and SCIM.

To generate API credentials, follow the steps below:

1. Go to Settings > User Management > API Credentials.
2. Click Actions > Create New API Credentials. 
3. Under the Details section, enter the API key Name and Description.
4. Under Expiration, use the calendar icon to select the Expiration date (you can set up to 3 months from the creation date).

5. In the Notify by email when a key is nearing expiration section, turn on the toggle to receive alerts before the key expires.
   • Destination email Addresses. Enter the destination email address to receive alerts before the key expires.
   • Time before expiration to send Email. Select the time to send alerts before the key expires. For example, if you select 7 days, you will receive a notification 7 days before the API key expires.
   • Frequency of notification. Select how often you want to receive an alert before the key expires (for example, Daily, Weekly, or Monthly). For example, if you select Monthly, you will receive a recurring notification each month before the key expiration date.

6. When you select the SCIM Provisioning, on the SCIM Administrator panel, select Users and Groups. This allows the SCIM administrator to create users and groups in the IdP. In the SCIM Provisioning section, perform the following actions:

• Select the SCIM Administrator checkbox. This role provides you with an OAuth 2.0 Client ID and Client Secret instead of a standard API key.
• Click Show next to SCIM Connection/Endpoint Configuration Details.
• Use the copy icon to copy and save the copied Base URL and the OAuth Token Endpoint URL for future use.
  • Base URL. https://api.skyhigh.cloud/scim/v1
  • OAuth Token Endpoint URL. https://iam.skyhigh.cloud/iam/v2/token

9. Click Save.

10. In the API Credentials dialog, click the copy icon next to the Client ID and Client Secret. Save these credentials securely, as you will need to provide them to your IdP during the SCIM integration process. Use the eye icon to view the API key.

9. Click Close.