Where it stands
The SAML 2.0 service-provider endpoints are built — sign-in, the assertion consumer and the metadata document. What is not finished is loading your identity provider's settings into them, so SAML sign-in cannot be switched on for anyone yet. When it can, it will be part of the Enterprise plan.
Features often bundled with SAML — mapping identity-provider groups to roles, creating people automatically on first sign-in, and sign-in started from your identity provider's portal — are not built.
What works today
- Google and Microsoft sign-in on every plan, so your team signs in with the account your company already manages.
- Passkeys and two-factor authentication on top of a password.
- Roles and permissions you define, and a full record of every change each person makes.
If you need SAML
Tell us which identity provider you use and when you need it. We will tell you where it stands rather than guess at a date.
Related
See the security page for the full sign-in and permission model.