Getting started
A step-by-step guide that takes you from an empty MIM server to a working import and export.
This guide walks you through setting up the management agent from start to finish. Each step links to the page that covers it in more detail.
Step 1: Decide what MIM will manage
Decide whether MIM will import users, groups, or both, and whether it will only import them or also write changes back. This determines which OAuth scopes and Okta admin permissions you'll need, so it's worth deciding before you set anything up in Okta.
Supported objects and operations lists what is available.
Step 2: Choose an authentication method
Choose one of the following:
API token, the quickest to set up
OAuth with a private JWK, when a key file on the MIM server is acceptable
OAuth with an X.509 certificate, when the private key must be non-exportable or held in hardware
Choosing an authentication method compares them in more detail.
Step 3: Prepare Okta
Follow the guide for the method you chose. This part of the setup is performed by your Okta administrator, and produces the values MIM needs: either an API token, or a client ID and a registered public key.
Step 4: Install the management agent
Check the system requirements, then run the installer. See Installing and upgrading.
If the MIM server needs a proxy to reach Okta, work through Configuring an HTTP proxy now.
Step 5: Create the management agent in MIM
Work through Creating the management agent. This covers connectivity, global settings, object types, attributes, joins, flows, and deprovisioning.
The object-specific detail is in Setting up user management, Setting up groups and membership, and Setting up password management.
Step 6: Create the run profiles
Full Import, Delta Import, Full Synchronization, Delta Synchronization, and Export.
Step 7: Import, review, then export
Run Full Import. Check the object counts and any import errors.
Run Full Synchronization. Review the joins, projections, disconnectors, and pending exports.
Once the pending exports look right, run Export.
Run Delta Import and Delta Synchronization to confirm the export.
Step 8: Test each operation you enabled
Test the operations MIM will actually perform: create, update, suspend, unsuspend, deprovision, membership, password. Run a confirming import after each export. Use a full import to confirm a permanent delete.
Then enable your normal schedule, and keep a periodic full import in it so MIM can detect objects deleted outside of MIM.
Last updated