CREATE SECURITY INTEGRATION

Syntax

CREATE SECURITY INTEGRATION [IF NOT EXISTS] security_integration_name
WITH (security_integration_parameter = value [, ... ]);

Description

Security Integrations allow Organizations to configure authentication and authorization mechanisms.

Security Integrations can only be created by a Role with MANAGE_MEMBERS privilege.

Arguments

security_integration_name

Specifies the name of the new Security Integration. For case-sensitive names, the name must be wrapped in double quotes, otherwise, the lowercased name will be used.

WITH (security_integration_parameter = value [, …​ ])

This clause specifies Security Integration Parameters.

Security Integration Parameters

Parameter Name	Description
type	Type of Security Integration. Required: Yes Valid values: SCIM

SCIM Specific Parameters

Parameter Name	Description
scim.client	Type of SCIM client that will use the SCIM API. Required: No Valid values: OKTA
scim.run_as_role	The Role used to manage all Users and Custom Roles for the SCIM integration. Required: No Valid values: okta_skim_provisioner for OKTA client. Default: okta_skim_provisioner for OKTA client.

Examples

Create a OKTA SCIM security integration

The following creates a new SCIM Security Integration with name okta:

Note, the role okta_skim_provisioner must exist with the MANAGE_MEMBERS privlege.

<no-db>/<no-store># CREATE SECURITY INTEGRATION "okta" WITH ( 'type' = SCIM, 'scim.client' = OKTA, 'scim.run_as_role' = okta_skim_provisioner );
+----------------------+-------+----------+------------------------------------------+----------------------+-------------------+-------------------------------+
|  Type                |  Name |  Command |  Summary                                 |  Token               |  Uri              |  Expires At                   |
+======================+=======+==========+==========================================+======================+===================+===============================+
| security integration | okta  | CREATE   | security integration okta was            | <redacted_new_token> | <integration_uri> | 2025-07-15 23:17:15 +0000 UTC |
|                      |       |          | successfully created                     |                      |                   |                               |
+----------------------+-------+----------+------------------------------------------+----------------------+-------------------+-------------------------------+

The Uri and Token from the response of this command can be used to configure an Okta App Integration.