SSO & SCIM
Cloud & Enterprise · SSO Team plan and up · SCIM Enterprise plan
Splyntra Cloud supports enterprise identity in two complementary ways: SAML 2.0 single sign-on for login, and SCIM 2.0 for automated user provisioning. Both are configured per organization.
SAML 2.0 single sign-on
SSO lets members log in through your organization's identity provider using SAML
2.0. It is available on the Team plan and up (feature sso).
The org-scoped SAML endpoint handles both directions of the flow:
GET api/auth/saml/[org] # initiate login (redirect to your IdP)
POST api/auth/saml/[org] # Assertion Consumer Service (ACS) — process the IdP response
SAML and OAuth logins are never blocked by email verification — verification only gates credential (email/password) logins.
SCIM 2.0 provisioning
SCIM automates user lifecycle — creating, updating, and deactivating members from
your identity provider instead of managing them by hand. SCIM provisioning is an
Enterprise feature (feature saml_scim).
Your IdP calls the org's SCIM Users endpoint with a per-org bearer token:
api/scim/v2/Users
The endpoint follows RFC 7644 and is authenticated by a bearer token issued for that specific organization.
Related
- SCIM 2.0 reference — the
/Usersprovisioning API in detail. - Organizations & teams — roles and membership that SSO and SCIM populate.
- Plans & pricing — which plans include SSO and SCIM.