SSO and SCIM

we support sso (saml and oidc connections), along with directory scim through workos sso can be configured on the foundations, legacy plus, plus and enterprise plans foundations legacy plus plus enterprise ✅ ✅ ✅ ✅ scim can be configured for accounts on the legacy plus, plus and enterprise plans foundations legacy plus plus enterprise ❌ ✅ ✅ ✅ sso and scim overview single sign on (sso) and system for cross domain identity management (scim) are essential tools for modern businesses our platform integrates with workos to provide seamless sso and scim capabilities, ensuring secure access and efficient user management for your organization getting started how do i set up sso/scim for my organization? reach out to our support team at mailto\ support\@ashbyhq com with the following details the email address where you’d like any error messages or notifications directed (it service account recommended) if you’d like to setup sso, or both sso and scim support will follow up, providing you with a setup link once you receive the link, follow the on screen instructions to integrate your identity provider with our platform via workos the steps provided will be tailored to your identity provider test the integration to ensure everything is working correctly please confirm with support once you’ve completed the setup process pricing how much does the sso/scim service cost? sso is included for plus and enterprise plans for those on the foundations plan, sso is a paid add on it costs $100/per month, billed monthly or annually, depending on your plan faq i have users in ashby that are not in my directory if i set up scim, will those users still be active when the directory sync is enabled? no, any users that are in ashby, but not in your directory will be deactivated in ashby once the sync is enabled prior to directory sync being enabled, you should first confirm that the list of users in your directory is the full list of users that need to access ashby what is sso? sso (single sign on) allows users to access multiple applications with a single set of credentials this means you don't have to remember multiple passwords for different services w hat is scim? scim (system for cross domain identity management) is a standard that automates the exchange of user identity information between identity domains or it systems which identity providers do you support? through our integration with workos, we support a wide range of identity providers, including but not limited to google workspace, microsoft azure ad, and okta see https //workos com/docs/integrations for a full list of idps do you support jit? we don’t currently support just in time provisioning, please submit a feature request to mailto\ support\@ashbyhq com if you’re interested in this option! do you support log steams or domain verification? we do not support log streams or domain verification how do i get the setup link for sso/scim integration? please contact your customer success manager or our support team ( mailto\ support\@ashbyhq com ) is the sso/scim integration secure? absolutely! our integration with workos ensures that all data is encrypted and securely transmitted we adhere to industry best practices to ensure the safety and privacy of your data learn more about our security practices https //www ashbyhq com/resources/security i'm facing issues with the sso/scim setup what should i do? if you encounter any issues during the setup or have questions about the integration, please reach out to mailto\ support\@ashbyhq com we're here to help! can i use both sso and scim together? yes, you can use both sso and scim together while sso streamlines the login process, scim ensures efficient user management across platforms can permissions be mapped with scim? at this time, we only support provisioning users, not mapping permissions users will be added, via directory sync, as limited access users; you may change their permissions level can be changed in their employee profile once the user account has been created within ashby via the sync what attributes are pulled via scim? we are able to pull in the user’s email, name and job title you can opt to enable job title syncing and syncing name updates in the scim settings within integrations in admin once configured, how often do scim syncs happen? scim syncs happen hourly we also respond to web hooks