Teams
SSO
Single sign-on for team workspaces using SAML or OIDC. Map IdP groups to ASUME roles and control who can join.
Setup
Workspace admins configure SSO from settings with your identity provider metadata.
Supported protocols include SAML 2.0 and OpenID Connect. Test in staging before enforcing for all members.
Provisioning
Map IdP groups to admin, member, or viewer roles so access stays aligned with your directory.
Just-in-time provisioning creates accounts on first login when email domains are allowlisted.
Security
Enforce SSO-only login to disable password auth for the workspace.
Enterprise customers can add SCIM, custom session policies, and audit requirements.