TechWatchAlert
Directory and SSO

SAML 2.0 and SCIM 2.0

Sign-in with the corporate account over SAML 2.0, and accounts created, updated and deactivated by your directory over SCIM 2.0.

What the connector does

Your colleagues sign in through your SAML identity provider (Microsoft Entra ID, Okta, Google Workspace, ADFS…), which decides on the password and two-factor authentication. With SCIM, Entra ID and Okta create, update and deactivate the organization's accounts themselves, and place everyone in the right groups. Google Workspace does not provision custom applications: with Google, accounts are created at the first SAML sign-in.

What comes into TechWatchAlert

  • People from your verified domains, signed in with their corporate account
  • Directory groups, linked to the organization groups that grant roles and projects
  • Joiners, name changes and leavers: an account deactivated in the directory loses access at once, without anything being deleted
  • The log of the directory's latest operations, rejections included, and every sign-in in the audit log

Setup

  1. Verify your email domain in Organization settings › Security › Authentication (SSO)
  2. Choose SAML 2.0, give your provider the entity ID and reply URL, import its metadata, then “Test with my account” before activating
  3. For SCIM, generate the token in Security › Provisioning (SCIM) and paste it, with the base URL, into Entra ID or Okta
Connectors

Plug in your tools in minutes

Start with a repository, a fleet or a scan report: your first targeted alerts arrive with the first sync.

Talk to the team

Free plan, no credit card · hosted in France