📄️ Overview
Agility Credit supports federated sign-on so your users can authenticate against your existing identity provider (IdP) — Okta, Entra ID (Azure AD), or any standards-compliant SAML 2.0 / OIDC provider. You can optionally enable SCIM for automated user provisioning.
📄️ Set up Okta
This guide walks through connecting Okta as your SSO provider. Pick the protocol that fits your environment — SAML 2.0 or OIDC. You only need to set up one.
📄️ Set up Entra ID
This guide walks through connecting Microsoft Entra ID (formerly Azure AD) as your SSO provider. Pick the protocol that fits your environment — SAML 2.0 or OIDC. You only need to set up one.
📄️ Role mapping
Role mapping controls how Agility roles are assigned to users signing in via SSO. It runs on every SSO sign-in, so a user's roles always reflect their current state in your IdP (when SCIM is disabled).
📄️ SCIM provisioning
SCIM (System for Cross-domain Identity Management) lets your IdP automatically create, update, and deactivate Agility Credit users based on assignments and group memberships in your IdP. When SCIM is enabled, your IdP becomes the source of truth for user lifecycle and role assignment.
🗃️ SCIM custom integration
4 items
📄️ SSO-exempt users
Once SSO is enabled, every member of your tenant signs in through your IdP. If your IdP is down or misconfigured, that means nobody can sign in, including the administrators who would fix it.
📄️ Troubleshooting
This page covers common problems and how to use the activity log to diagnose them.