Thanks for that, Craig.

Authentication is all fine, the issue has been that for provisioning, Totara does not seem to support the SCIM standard and SOAP or REST must be used. For us, that means using an intermediary service like Snaplogic to present the data as something acceptable to Totara. While this works for the most part, there is a lot that can go wrong with such a complicated workflow.

I will pass on your comments to our developers to see if it sheds any light on improvements that could be made.