Enterprise SSO, SAML, OIDC and SCIM provisioning
Large customers often sign only if their employees can log in through the company's identity tool. This lesson teaches you to specify an enterprise customer's SSO with SAML or OIDC, to choose how accounts are created and removed, including with SCIM, and to plan for departures and outages.
Lesson objective
By the end of this lesson, you will be able to specify an enterprise customer's SSO (protocol, domain verification, enforced sign-in, role mapping), choose between just-in-time provisioning and SCIM provisioning, and plan for an employee leaving, break-glass accounts and identity provider outages.
Topics covered
- enterprise SSO
- SAML
- SCIM
- user provisioning
- B2B SaaS
Where it fits
Delegating sign-in
When should you let Google, Microsoft or a company's directory authenticate your users, and what do you need to specify?
Lessons in this module
- OpenID Connect and signing in with Google, Apple or Microsoft
- Enterprise SSO, SAML, OIDC and SCIM provisioning (this lesson)
What you will learn in this module
This lesson is part of the course Design authentication and permissions for a product
- Specify delegated sign-in (OpenID Connect, social login) and enterprise SSO (SAML, OIDC, SCIM provisioning) for a B2B product.
Related courses
- Product ManagementAdvancedRegular practice: you already use the tools or work on this topic.
Git for PMs: ship as a team without putting production at risk
3 hr 30 min
- Tech for PMsAll levelsNo prerequisites: accessible to everyone.
Explain how a web product works, from browser to server
2 hr 30 min
- Tech for PMsJuniorSome basics are useful: introductory knowledge of the topic.
Design and test an API integration as a PM
3 hr