Ping SCIM Setup

SCIM allows Ping to automatically create and manage users and roles in CLEAR.

---

Create a SCIM API Key in CLEAR

1. In the CLEAR dashboard, go to Integrations
2. Click Add API Key
3. Name the key
4. Choose Sandbox or Production
5. Copy the API key

This is the only time the API key can be copied.

---

Create SCIM App in Ping

1. Log in to Ping Admin
2. Select your Environment
3. Create a custom attribute:
   • Name: cv_roles
   • Type: Enumerated Values or No Validation
   • Use CLEAR Role IDs as values

---

Configure SCIM Provisioning

1. Go to Integrations → Provisioning
2. Create a new connection
3. Choose Identity Store then SCIM Outbound
4. Enter:
   • SCIM Base URL: https://verified.clearme.com/scim/v2
   • Auth Method: OAuth2 Bearer Token
   • Token: CLEAR SCIM API Key
5. Test the connection
6. Save if successful

---

Create Provisioning Rules

1. Create a new rule
2. Set source and target
3. Configure user filters
4. Map attributes:
   • Ping attribute: CLEAR 1 Role
   • CLEAR attribute: clear:cv_role
5. Enable the rule
6. Sync users

Troubleshooting

If SCIM provisioning is not working as expected, check the following:

• Users not provisioning:
  Ensure the provisioning rule is enabled, the user matches the rule filter, and the user is assigned to the correct Ping group.

• SCIM connection fails:
  Verify the SCIM API key is valid, the Base URL is correct, and authentication is set to OAuth2 Bearer Token with header Bearer.

• Roles missing in CLEAR:
  Confirm attribute mapping is set from CLEAR 1 Role → clear:cv_role, and the user has a valid role value assigned.

• No changes syncing:
  Check that the rule targets the correct source (Ping directory) and target (CLEAR SCIM connection), and that filters are not overly restrictive.

• Updates or deprovisioning not applied:
  Review enabled provisioning actions and confirm the expected behavior is supported by CLEAR.

If issues persist, contact CLEAR Solutions Engineering with your Ping environment ID and example user.