Appearance
Configure an Identity Provider
Identity Providers (IdPs) use SCIM (System for Cross-domain Identity Management) v2 to connect your organization's identity service to Relayter. When configured, IdPs can work alongside SSO clients to enable sign-in flows and user provisioning.
Add an identity provider
- Go to Settings → Team settings → Connections and authentication → Identity Providers.
- Click Add identity provider.
- In the modal, enter the configuration details:
- Name — a label for this IdP (e.g., "Corporate SCIM" or "Okta Directory"). Must be unique within your team.
- Type — Relayter supports SCIM v2
- Bearer token — the authentication token from your IdP (minimum 32 characters). This token is securely stored and used to authenticate SCIM API requests.
- SSO client (optional) — if you want to link this IdP to an existing SSO client, select it from the dropdown
- Status — toggled Active by default
- Click Save.
Your team can have only one SCIM v2 identity provider at a time.
Understand identity provider fields
- Type: Relayter currently supports SCIM v2. This standard protocol allows your IdP to provision and manage user and group identities in Relayter.
- Name: A unique, friendly name for this identity provider configuration within your team. If you delete and recreate an IdP, you can reuse the same name.
- Bearer token: A secure token provided by your identity service. The token is encrypted and never exposed in the UI. Treat it as a secret and do not share it.
- SSO client: Optionally links the IdP to an SSO client, enabling coordinated sign-in flows that use the configured identity provider.
- Status: When active, the IdP is available for SCIM API operations. When inactive, SCIM requests will be rejected.
Edit an identity provider
- Go to Settings → Team settings → Connections and authentication → Identity Providers.
- Find the IdP in the table and click the edit (pencil) icon.
- Update any of the following fields:
- Name
- Bearer token — leave blank to keep the existing token
- SSO client
- Status
- Note: The provider type cannot be changed after creation.
- Click Save.
Delete an identity provider
- Go to Settings → Team settings → Connections and authentication → Identity Providers.
- Find the IdP in the table and click the delete (trash) icon.
- Confirm the deletion.
What happens when you delete an identity provider:
- The identity provider configuration is removed from Relayter.
- Any SCIM users or groups that were previously synced from this IdP remain in Relayter but cannot be updated via SCIM.
- Future SCIM API requests from your identity service will be rejected because the authentication provider no longer exists.
- You can reconfigure a new identity provider and use the same name, but you must obtain a new bearer token from your identity service.