Feature · Platform
Enterprise identity
Enterprise identity connects your identity provider with OIDC or SAML, provisions people with SCIM, and can require single sign-on for your email domain.
How it works
What you can set
- Connections: an OIDC or SAML identity provider. Select Validate before you enable it.
- SCIM provisioning: a token for your identity provider. It is shown one time.
- Domain policy: your email domain, and whether to require single sign-on.
- Service identities: machine identities with limited scopes.
Availability
These controls work only when the operator of your Agent server turns enterprise identity on. Otherwise the page shows Disabled or Setup required. Only owners and admins can open it.
From the help article Enterprise identity, checked against the product on .
What you can do
The operations this feature's screens call. Each one is POST /api/<name>, and the badge says who may call it.
ViewergetEnterpriseIdentityGets enterprise identity.
Types:
Record<string, never>returnsEnterpriseIdentityView
AdminNo API tokenssaveEnterpriseIdentityConnectionSaves the enterprise identity connection.
Types:
{ id?: string kind: EnterpriseIdentityKind name: string issuer: string | null clientId: string | null entityId: string …returnsEnterpriseConnectionSummary
AdminNo API tokenssaveEnterpriseDomainPolicySaves enterprise domain policy.
Types:
{ id?: string; domain: string; status: EnterpriseDomainStatus; requireSso: boolean; connectionId: string | null }returnsEnterpriseDomainPolicyView
AdminNo API tokensrotateEnterpriseScimTokenRotates the enterprise SCIM token.
Types:
{ status?: EnterpriseScimStatus }returns{ scim: EnterpriseScimView; token: string }
AdminNo API tokensrevokeEnterpriseScimRevokes the enterprise SCIM.
Types:
Record<string, never>returns{ ok: true }
AdminNo API tokenscreateEnterpriseServiceIdentityCreates enterprise service identity.
Types:
ServiceIdentityCreateInputreturnsServiceIdentityToken
AdminNo API tokensrevokeEnterpriseServiceIdentityRevokes enterprise service identity.
Types:
{ identityId: string }returns{ ok: true }