IT & Identity
Enterprise Identity
& Access Management
SSO, MFA, SCIM provisioning, and session policy for organisations that integrate Productivity Workbench with their existing IdP and IAM programme.
Capabilities
Identity capabilities
SAML 2.0 & OIDC SSO
Live- Organisation-level identity provider configuration
- Federated sign-in from the login page using your organisation identifier
- Optional just-in-time provisioning for new federated users
- Compatible with Azure AD, Okta, Google Workspace, and other SAML/OIDC providers
MFA enforcement (TOTP)
Live- Authenticator-app second factor supported platform-wide
- Organisation or workspace policy to require MFA for all members
- Access blocked when MFA is required but not satisfied
- Self-service enrolment during sign-in or from account settings
SCIM 2.0 provisioning
Live- Automated user and group provisioning from your IdP
- Standard persona groups map to workspace roles
- De-provisioning removes access without deleting customer content
- Rotatable bearer token managed in Organisation Security
Session & step-up policy
Live- Configurable maximum session duration per organisation
- Step-up verification for destructive or high-risk admin actions
- Re-authentication flow to refresh elevated session trust
IP allow-listing
Live- Define approved network ranges at organisation and workspace level
- Enforced on workspace and organisation API routes before handler execution
- Blocked IPs always deny; workspace rules may narrow org CIDR when policy allows
Rollout
Organisation admin checklist
Typical rollout sequence for IT teams
Register organisation and assign Organisation Admin role
Configure SSO IdP metadata in Organisation → Security
Enable MFA required for organisation or per workspace
Generate SCIM bearer token and configure IdP provisioning
Set session max hours and step-up window to match your policy
Review organisation audit log for security events
Need integration support?
Enterprise customers receive guided SSO and SCIM setup. Contact enterprise@productivityworkbench.com with your IdP vendor and target go-live date.