Skip to content

Identity provider guides

Identity provider guides

The setup portal shows the values to copy into your identity provider, labelled with your provider's own field names, and the steps to follow. These pages say the same with a little more context, so you can prepare before you open the link.

Identity providers rename and move their admin screens often. The click paths here were current when written; if a menu has moved, search your provider's admin console for the field name, which changes far less often.

The portal and these pages are built from the same guides, so a field name here is the one the portal shows.

Provider Enterprise SSO Directory Sync
Okta SAML 2.0 SCIM
Microsoft Entra ID SAML 2.0 SCIM
Google Workspace SAML 2.0 Not over SCIM; see the page
OneLogin SAML 2.0 SCIM
JumpCloud SAML 2.0 SCIM
PingFederate SAML 2.0 SCIM
PingOne SAML 2.0 SCIM
AD FS SAML 2.0 Not guided; SCIM 2.0 if it can push with a bearer token
Auth0 SAML 2.0 Not guided; SCIM 2.0 if it can push with a bearer token
Keycloak OpenID Connect Not guided; SCIM 2.0 if it can push with a bearer token
Duo SAML 2.0 SCIM
CyberArk Identity SAML 2.0 SCIM
Shibboleth SAML 2.0 Not guided; SCIM 2.0 if it can push with a bearer token
Oracle Cloud Infrastructure IAM SAML 2.0 SCIM
SAP Cloud Identity Services SAML 2.0 Not guided; SCIM 2.0 if it can push with a bearer token
Salesforce SAML 2.0 Not guided; SCIM 2.0 if it can push with a bearer token
LastPass SAML 2.0 Not guided; SCIM 2.0 if it can push with a bearer token
Cloudflare Access SAML 2.0 Not guided; SCIM 2.0 if it can push with a bearer token
Anything else SAML 2.0 or OpenID Connect SCIM 2.0