After this article
You will be able to connect Guru to Lumos to sync users and roles and to deprovision access.Capabilities
Deprovisioning is available for Offboarding, Access Reviews, and License Management. It is not available for the AppStore.
User status mapping. If Guru returns a user, the Lumos Account Status is Active. If the user is deleted and Guru no longer returns them, the status is Deprovisioned.
Required plan and roles
- Guru plan: you need the Guru All-in-one or Enterprise plan.
- Guru role: the connecting user must be an admin.
- SCIM: SCIM must be enabled on your Guru account before you connect. If Guru is already connected to your identity provider via SCIM, you cannot connect this integration.
Read-only access vs provisioning
Is read-only possible? No. Guru connects with a single admin-generated API token, and that same token is what Lumos uses to deprovision users. No narrower, read-only token is documented. What full provisioning requires. An API key generated by a Guru admin on the All-in-one or Enterprise plan, entered in Lumos along with the generating admin’s email. Follow the steps below. Watch out for. This connector can’t be used at all if your organization already manages Guru licenses through SCIM and your identity provider. Because the token isn’t scoped, you also can’t limit an existing connection to sync-only: it’s read-write or nothing.Instructions
Phase 1: Generate an API key in Guru- Follow Guru’s instructions to generate an API key. Note the email of the user who generated it.
- Find the Guru card in your Lumos integrations (reconnect an existing card or add a new one).
- Enter the email of the user who generated the API key in the Email field.
- Enter the API token in the User Token field.
- Click Connect Guru.