What Oleria discovers
User accounts and profile attributes synced from UiPath Orchestrator’s directory. Oleria uses this data for dormant account detection and access reviews, refreshed on Oleria’s regular sync schedule.Prerequisites
- Admin access in UiPath Orchestrator with permission to create OAuth clients.
- A UiPath Orchestrator plan that includes SCIM provisioning.
- Admin access on the Oleria platform to add a new integration.
Get your SCIM credentials from UiPath Orchestrator
1
Create an OAuth client in UiPath Orchestrator
Sign in to UiPath Orchestrator as an admin and create an OAuth client for SCIM in Automation Cloud > Admin > External Applications. Make it a confidential application with SCIM scopes. SCIM access uses the OAuth 2.0 client credentials grant, so Oleria requests a fresh access token for each sync.
2
Copy the client credentials
Copy these values before you leave the page - you’ll paste them into Oleria in the next section:
- SCIM Base URL - the SCIM 2.0 endpoint UiPath Orchestrator shows when you enable provisioning.
- Client ID and Client Secret - from the OAuth client you created.
- Token URL -
https://cloud.uipath.com/<org>/identity_/connect/token.
Copy the client secret now and store it securely. Rotate it per your organization’s security policy.
Connect UiPath Orchestrator to Oleria
1
Open the integration
Go to your Oleria workspace, select Integrations, then select the UiPath Orchestrator tile.
2
Complete the connection form
Fill in the connection form:
3
Save the integration
Select Connect to validate the credentials and save the integration.
Verify the integration
Confirm the new instance appears on the Connected tab of your Oleria Integrations page with a status of Healthy. Oleria syncs users from UiPath Orchestrator on its regular sync schedule once the initial sync completes.If you rotate the client secret in UiPath Orchestrator, update the Client Secret in Oleria by editing the integration.
Remediation actions
Oleria can also take these actions in UiPath Orchestrator when the OAuth client can update users:- Enable or disable a user account
- Create a new user
Oleria doesn’t check the OAuth client’s permissions until an action runs. If an action fails, confirm the OAuth client can update users in UiPath Orchestrator.