Setting up SSO and SCIM
SSO, SAML, SCIM and identity provider integration are Enterprise features. See pricing.
Step-by-step guides
Recommended order
Configure SSO and test it with one admin account.
Map IdP groups to roles with Role Provisioning.
Turn on SCIM so users and groups stay in sync automatically.
Set up Break the Glass access before you enforce SSO for everyone.
Troubleshooting
Symptom | Likely cause |
|---|---|
User can’t sign in | They aren’t assigned to the NeuralTrust app in your IdP |
User signs in with the wrong role | Group-to-role mapping is wrong |
New users or groups missing | SCIM is off or failing. Try a manual sync |
Nobody can sign in | Your IdP is unavailable. Use Break the Glass |
When you open a request, include the IdP you use, the affected user’s email and the exact error message. Never send client secrets or certificates.