SSO and SCIM Your directory, in charge.
Connect SAML single sign-on and SCIM, and Plinth follows your directory: people get access when they join a group and lose it when they leave.
How it works
-
Connect your provider
Okta, Microsoft Entra ID, Google Workspace or any SAML provider.
-
Map groups to roles
Decide which groups get viewer, editor or admin access.
-
Require it
Turn off passwords for everyone except a break-glass admin.
The details
- Just-in-time accounts
- People who sign in for the first time get the role their group maps to.
- Automatic removal
- Leavers lose access as soon as your directory removes them.
- Session controls
- Set session length and require re-authentication for sensitive changes.
More of the platform
-
Feature flags
Put every change behind a flag and decide who sees it, without a deploy.
Learn more: Feature flags -
Scheduled rollouts
Go from 1% to everyone over days, with automatic pauses when errors rise.
Learn more: Scheduled rollouts -
Experiments
Split traffic between variants and get a clear result, with the statistics done for you.
Learn more: Experiments
Try SSO and SCIM today
Free for small teams. Set up in minutes.