SSO/SCIM FAQ (Professional Plan Only)
SSO/SCIM is only available on Professional tier plans. Contact us at [email protected] for more information.
Why set up SSO/SCIM?
Our SSO/SCIM feature saves your team time and money. With a synced directory, your user list in your directory is identical to your user list in Tettra - no more manual processes for sending invitations or deactivating users.
Also when your directory is synced, team members who have left your company are automatically removed from Tettra - you won't be paying for them after they leave, and you'll have the security of knowing they aren't able to access your company knowledge.
With SCIM, you can also use Groups (link) to set Invite-Only Categories per team easily.
Does domain verification work on all domains?
No, SSO/SCIM with Tettra will only work with non-public domains. If your team has email addresses whose domain is Gmail, Yahoo, Outlook, or a similar public domain, SSO/SCIM isn't available.
Can my Workspace have multiple approved domains?
Yes. When we set up SCIM with you, you'll give us a list of domains you'd like verified (for example, yourteam.com, yournewteam.com, etc).
Can I remove a domain from my workspace?
At this time, you will not be able to remove a domain. If you have multiple domains or recently changed your domain and need one deleted, please contact our support team and we'll do our best to assist.
Can I keep some of my employees out of Tettra?
Possibly. This depends on the IDP you're using (for example, Okta, Azure, Google, etc.). Generally, SCIM directory sync means all your team members will be given Tettra accounts, and anyone not in the domains you provide us will not have access to your Tettra space. However, some IDPs allow you to select some groups to sync and others not to sync.