Skip to main content
sazabi sso — Set up single sign-on. Subcommands: status, domains, connect, disconnect, connection, break-glass, scim.

sazabi sso

Set up single sign-on Claim and verify your email domains, connect your SAML or OIDC identity provider, and test the connection. Turning SSO enforcement on or off and choosing break-glass owners happen only in the dashboard.

sazabi sso status

Show the connection, domains and whether SSO is enforced

sazabi sso domains

Claim and verify SSO domains

sazabi sso domains list

List claimed domains

sazabi sso domains claim

Claim a domain and get its TXT record

sazabi sso domains verify

Look up a claimed domain’s TXT record now

sazabi sso domains remove

Remove a claimed domain

sazabi sso connect

Connect your SAML or OIDC identity provider If the organization already has an SSO connection, connect replaces its identity settings.

sazabi sso disconnect

Delete the SSO connection and end the access it granted

sazabi sso connection

Read and test the SSO connection

sazabi sso connection get

Show the connection and what to register with your provider Includes the service-provider details to register with your identity provider.

sazabi sso connection test

Sign in through the connection to test it

sazabi sso break-glass

List the owners who can sign in while SSO is enforced Break-glass owners sign in with an email code and an authenticator while SSO is enforced. Only an owner signed in to the dashboard chooses them.

sazabi sso break-glass list

List break-glass owners

sazabi sso scim

Manage SCIM provisioning SCIM lets your identity provider add and remove members. Each new token is printed once and never saved.

sazabi sso scim status

Show whether SCIM is on or paused, and its tokens

sazabi sso scim enable

Turn SCIM on and print its first token

sazabi sso scim rotate-token

Print a new SCIM token; the old one works 24 hours

sazabi sso scim disable

Turn SCIM off and revoke every token

sazabi sso scim pause

Pause SCIM so it refuses your identity provider’s changes While SCIM is paused, your identity provider’s changes are refused and it retries them; reads still work. SCIM also pauses itself when deactivations cross the threshold.

sazabi sso scim resume

Resume SCIM after it paused

sazabi sso scim set-threshold

Set how many deactivations an hour SCIM allows before it pauses

sazabi sso scim list-members

List members with a SCIM record, including after SCIM is off Lists every member SCIM provisioned, including after SCIM is turned off or the SSO connection is deleted, so you can review whom to remove by hand.

sazabi sso scim mismatch-report

List SSO sign-ins without a SCIM record, and unused records Lists members who signed in with SSO in the last 30 days without a SCIM record, and SCIM records whose user never signed in with SSO. Each group holds at most 500 rows.