Settings
Enterprise authentication and evidence-retention controls. Secrets are never rendered back after storage.
Enterprise SSO
OIDC
Enterprise provisioning
SCIM 2.0
Provision users and groups from an identity provider. Groups can optionally map to one non-OWNER AccessProof role; conflicting role-group assignments are rejected instead of guessed.
Base URL: /scim/v2
Data minimization