Enterprise Identity

Configure verified domains, SSO policies and SCIM provisioning for centrally managed organizations.

Identity Centralized access

Authentication SAML / OIDC ready

Provisioning SCIM available

Organization identity

Choose the workspace and identity method used to control organization access.

Workspace

Identity mode

Verified domain Control access using an approved organization email domain.

SAML 2.0 Store identity-provider metadata for enterprise SSO.

OpenID Connect Configure OIDC issuer details for modern identity providers.

Domain & role policy

Define the trusted organization domain and default access role.

Verified domain

Default role

Auto-join verified users Automatically add users whose email matches the verified organization domain. Enable identity configuration Activate this workspace identity policy. Require SSO Require workspace users to authenticate through the configured identity provider.

Single sign-on

Configure identity-provider endpoints used for SAML or OIDC.

Issuer URL

SSO URL

SAML/OIDC metadata is stored and governed here. The live identity-provider handshake activates only after production IdP metadata and secrets are configured.

Save & provisioning

Save identity policy changes or create a SCIM token for directory provisioning.

Provisioning endpoint

Use the generated SCIM token to authorize enterprise directory provisioning.

GET /scim/v2/Users Authorization: Bearer <SCIM_TOKEN>

Treat SCIM tokens like passwords. Store them only in approved secrets-management systems and rotate them if exposure is suspected.