SAML single sign-on (SSO) and SCIM

Larger organisations often want everyone to sign in through their identity provider, such as Okta, Microsoft Entra ID or Google Workspace, and want accounts created and removed automatically. This article explains what Cypher LM supports today and how to ask about more.

What is available today

SAML single sign-on and SCIM user provisioning are not self-serve features in Cypher LM today. There is no SSO setting in the dashboard to configure yourself.

Teams sign in this way:

• Sign in with Google. If your company uses Google Workspace, this is the closest thing to single sign-on: your Workspace policies, including Google's two-step verification, apply to the Cypher LM sign-in.
• Email and password. Anyone without a Google account can sign in with their email.
• Personal invites. The account owner, or a teammate with team access, invites each person by email and picks their role.

Set up your team without SSO

1. Go to Settings › Team & roles.
2. Select Invite teammate and enter their work email.
3. Choose a Role: Manager, Front desk or Sales rep. For a Sales rep, tick the agents they handle.
4. Send the invite. The person signs in with Google or email using that address.

See Managing users for invites, resending and revoking.

Removing access when someone leaves

Without SCIM, removing a person is a manual step. When someone leaves your organisation:

1. Remove them from Settings › Team & roles.
2. Revoke any pending invite you sent them.
3. If they could have had your own password, change it in Settings › Security and select Sign out everywhere else.

If they signed in with a Google Workspace account that you suspend, they can no longer sign in to Cypher LM with Google either.

Why sign-in with Google helps

When your team signs in with Google Workspace accounts, your Workspace admin already controls password rules, two-step verification and suspending a departing employee. Cypher LM checks that the Google email is verified before it lets anyone in, and each connection to a Google service is tied to the person who started it. For most small and mid-sized teams this gives the main benefits of SSO without extra setup.

Asking about SSO for Enterprise

When you contact sales, include:

• Your identity provider.
• How many people need access, and which roles they need.
• Whether you need SCIM provisioning as well as SSO.
• Any security review or questionnaire your company requires.

Write to sales@cypherlm.com or use cypherlm.com/contact. For how we protect accounts today, see Security and compliance.

Frequently asked

Can I force everyone to sign in with Google?

There is no setting that blocks email sign-in. In practice, invite people with their Google Workspace addresses and ask them to choose Sign in with Google.

Does Cypher LM support SCIM for automatic user provisioning?

Not today. Add and remove teammates in Settings › Team & roles. Ask sales if SCIM is a requirement for your rollout.

Is two-step verification available?

Two-step verification inside Cypher LM is coming soon. Signing in with Google lets you rely on Google's two-step verification in the meantime.