Security
SAML single sign-on, SCIM provisioning, the audit log and third-party application controls.
SAML
Members sign in through your identity provider (Okta, Google Workspace, Microsoft Entra ID…). Set it up in Settings › Security › SAML authentication & SCIM provisioning with your provider's metadata.
SCIM
Your identity provider creates, updates and deactivates members, and syncs groups to teams. Turn it on after SAML, on the same page, and give your provider the URL and token it shows.
Audit log
Security events (sign-ins, member and role changes, settings, API keys, applications) with who, when and from where. Owners read and export it in Settings › Audit log, or stream it to a webhook.
Third-party applications
An application you authorize acts in your workspace within the scopes you grant; what it does with the data is governed by its own terms. Admins can require approval before members connect one, and revoke any connection in Settings › Applications. You revoke your own in Settings › Account › Security & access.