Feature
Your people sign in the way they already do
On the Scale plan, staff sign in to SignSwifly through your own identity provider, and your directory adds, changes and removes them for you. Your IT team stays in control, and nobody keeps another password.
Company sign-in, verified domains and SCIM come with the Scale plan; required MFA and the idle sign-out come with Solo and up. We connect your identity provider with your IT team. Already set up? Sign in with your company.
In detail
Company sign-in (SSO)
- Microsoft Entra ID, Okta, Google Workspace, ADFS, or another OIDC or SAML provider
- Set up with our team: we connect your provider, then your admin runs a test sign-in before anything is required
- Staff sign in from one page with their work email
- Verified domains: prove you own your email domain with a DNS record
Rules you set
- Require company sign-in for everyone on your verified domains; contractors on other addresses keep their usual sign-in
- A way back in: the owner, and up to five admins they choose, can still sign in another way, and each time is recorded in the team activity log
- If nobody who can change the rules can sign in, our support team can stop requiring them — only after emailing your owner, admins and organisation address and waiting at least a working day, and anyone we email can cancel it
- People from your domain join on their first sign-in, as a Member or an Admin — your choice
- Require MFA for anyone who doesn’t sign in through your provider — on Solo and up
- Sign people out after 15 minutes to 12 hours idle — on Solo and up
User provisioning with SCIM 2.0
- Step-by-step guides for Microsoft Entra ID and Okta; other SCIM 2.0 clients can connect too
- People added, updated, suspended and removed as your directory changes
- Directory groups mapped to roles: Admin or Member
- The workspace owner is never suspended, removed or demoted by a sync
On the record
- Every sign-in rule change, every break-glass sign-in and every change made through SCIM is in the team activity log
- SCIM tokens are shown once, stored only as a hash, and can be revoked
- A provisioned person holds a seat from the moment they’re added; suspending them frees it
Why it matters
The benefits
Access follows your directory
Switch someone off in your directory and SCIM suspends them here.
One password fewer
Staff sign in the way they already do, with your provider’s own checks.
Evidence for your auditors
Who changed what, and when, is written down as it happens.
Connect SignSwifly to your directory
Company sign-in and SCIM are included in Scale, $199 a month. Choose Scale in the app, and we connect your identity provider with your IT team.