Configure LumApps user provisioning

1. Go to your LumApps sign-in page and sign in with your LumApps administrator account.
2. At the top, click the Settings iconSettings.
3. For Platform, click Provider settingsIdentity provider.
4. Click NewSCIM to create your SCIM Provider.
5. For Name, enter a name for your SCIM provider.
6. For Client Secret, you can enter any value. Write down the secret token as this will be the API token, and you will need the token for the configuration in the Admin console.
7. For LumApps identity provider, from the drop-down list, select a LumApps provider.
8. Turn on Enable user provisioning.
9. Click Save.
10. You can find the Provider UUID in the Identity provider management as the ID for the SCIM provider you just created. Copy and save the ID as you'll need it to complete the configuration in the Admin console.
11. Press Ctrl+Shift+? to open the Advanced Debug info window.
12. For Customer, next to the ID number, click Copy and save the ID. 
13. For Haussmann cell, next to the URL, click Copy and save the URL.
    You'll need both the ID and URL  when you complete the configuration in the Admin console.
14. Click anywhere outside of the Advanced Debug info window to close it.

You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click LumApps.
4. For Autoprovisioning, click Configure autoprovisioning.
5. For Access token, paste the API token that you copied from LumApps.
6. Click Continue.
7. For Endpoint URL, replace {base_url} with the Haussmann cell, {customer_id} with the Customer ID and {provider_uuid} with the SCIM Provider UUID you copied from LumApps in the preceding section.
8. For App attributes, verify that all mandatory attributes—those marked with an asterisk (*)—are mapped to Google directory attributes. If not, click the Down arrowand map them to the appropriate attribute.
9. Click Continue.
10. (Optional) To limit autoprovisioning to specific groups of users:
    1. For Search groups, enter one or more letters of the group name, select the group name, and choose a scope.
    2. Add any additional groups.
    3. (Optional) To remove a group, click Remove .

       If a group has users from a secondary domain or from outside of your organization, those users are not provisioned.

11. Click Continue.
12. Decide how long users have access to the app after the app is turned off for them or their Google Workspace account is suspended or deleted. You can suspend their account in LumApps. You can set the time frame individually for each option and choose within 24 hours or after one, 7, or 21 days.
    1. Choose options for each of these settings, as needed:
       • When an app is turned off for a user
       • When a user is suspended from Google
       • When a user is deleted from Google
    2. Click Finish. 
13. Turn on Autoprovisioning.
14. Click Turn on to confirm.

If you turned on the LumApps app for certain organizational units, only users in the added groups who are also members of those organizational units are subject to autoprovisioning.

You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click LumApps.
4. Click Autoprovisioning.
5. For Provisioning scope, click Edit.
6. For Search groups, enter one or more letters of the group name, select the group name, and choose a scope.
7. Add any additional groups.
8. (Optional) To remove a group, click Remove .

   If a group has users from a secondary domain or from outside of your organization, those users are not provisioned.

9. Click Update.

 You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click LumApps.
4. Click Autoprovisioning.
5. For Deprovisioning, click Edit.
6. Decide how long users have access to the app after the app is turned off for them, or their Google Workspace account is suspended or deleted. You can suspend their account in LumApps. You can set the time frame individually for each option and choose within 24 hours or after one, 7, or 21 days. 
   1. Choose options for each of these settings, as needed:
      • When an app is turned off for a user
      • When a user is suspended from Google
      • When a user is deleted from Google
7. Click Update.

You must be signed in as a super administrator for this task.

To turn off autoprovisioning for the app and keep the configuration information:

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click LumApps.
4. Choose an option:
   • Turn off Autoprovisioning.
   •  Click AutoprovisioningStatusTurn off.
5. Click Turn off to confirm.

You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click LumApps.
4. Click Autoprovisioning.
5. For Delete configuration, click Delete.
6. Click Delete to turn off autoprovisioning and remove all the configuration information.
   Existing users will not be removed from LumApps and can still use the app.