Security & Compliance
SSO & SCIM Configuration
Technical guide to configuring SSO and SCIM provisioning for enterprise security.
SSO Configuration (Admin Only)
Step 1: Prepare Your Identity Provider
- Create a new OIDC application in your IdP (Okta, Azure AD, etc.)
- Note the following credentials from your IdP:
- Client ID
- Client Secret
- Discovery Endpoint / Issuer URL (e.g.,
https://example.com/oauth2/default)
Step 2: Configure in Zelosify
- Navigate to Settings → Security → Single Sign-On
- Click "Configure SSO"
- Enter your IdP details:
- Discovery / Issuer URL
- Client ID
- Client Secret
- Copy Zelosify's Redirect URI back to your IdP:
- Redirect / Callback URL:
https://your-domain.zelosify.com/api/v1/auth/sso/callback
- Redirect / Callback URL:
Step 3: Attribute Mapping
Map IdP claims/attributes to Zelosify fields:
| IdP Claim | Zelosify Field | Required |
|---|---|---|
| User email | Yes | |
| given_name / name | First name | Yes |
| family_name | Last name | Yes |
| groups | Role mapping | Recommended |
| department | Department | Optional |
Step 4: Test & Enable
- Click "Test Connection" — performs a test OIDC sign-in flow
- Verify claims are mapping correctly
- Toggle "Enable SSO"
- Choose enforcement level:
- Optional: Users can use SSO or email/password
- Required: All users must use SSO (email/password disabled)
SCIM Configuration
See SCIM Provisioning for complete setup guide.