Account

Enterprise Single Sign-On (SAML 2.0) & SCIM directory sync

Configure identity provider integration (Okta, Microsoft Entra ID, Google Workspace) and automated SCIM user provisioning.

5 min read

Enterprise Identity Integration

Velstrian Tenderworks supports SAML 2.0 Single Sign-On (SSO) and SCIM 2.0 automated user provisioning for enterprise accounts, enabling centralized access governance.

SAML 2.0 configuration steps

  1. Navigate to Settings > Security > SSO.
  2. Copy your organisation's ACS URL (Assertion Consumer Service) and Entity ID (Audience URI).
  3. In your Identity Provider (Entra ID, Okta), create a new SAML Application and paste the endpoints.
  4. Upload your IdP metadata XML or paste the IdP SSO URL and X.509 Certificate into Velstrian Tenderworks.
  5. Enable Enforce SSO to disallow password authentication for verified email domains.

SCIM 2.0 user lifecycle management

SCIM synchronization automatically creates users when assigned in your IdP and deactivates access immediately upon employee offboarding, maintaining compliance with security baselines.