Skip to content

Configure an Identity Provider

Identity Providers (IdPs) use SCIM (System for Cross-domain Identity Management) v2 to connect your organization's identity service to Relayter. When configured, IdPs can work alongside SSO clients to enable sign-in flows and user provisioning.

Add an identity provider

  1. Go to SettingsTeam settingsConnections and authenticationIdentity Providers.
  2. Click Add identity provider.
  3. In the modal, enter the configuration details:
    • Name — a label for this IdP (e.g., "Corporate SCIM" or "Okta Directory"). Must be unique within your team.
    • Type — Relayter supports SCIM v2
    • Bearer token — the authentication token from your IdP (minimum 32 characters). This token is securely stored and used to authenticate SCIM API requests.
    • SSO client (optional) — if you want to link this IdP to an existing SSO client, select it from the dropdown
    • Status — toggled Active by default
  4. Click Save.

Your team can have only one SCIM v2 identity provider at a time.

Understand identity provider fields

  • Type: Relayter currently supports SCIM v2. This standard protocol allows your IdP to provision and manage user and group identities in Relayter.
  • Name: A unique, friendly name for this identity provider configuration within your team. If you delete and recreate an IdP, you can reuse the same name.
  • Bearer token: A secure token provided by your identity service. The token is encrypted and never exposed in the UI. Treat it as a secret and do not share it.
  • SSO client: Optionally links the IdP to an SSO client, enabling coordinated sign-in flows that use the configured identity provider.
  • Status: When active, the IdP is available for SCIM API operations. When inactive, SCIM requests will be rejected.

Edit an identity provider

  1. Go to SettingsTeam settingsConnections and authenticationIdentity Providers.
  2. Find the IdP in the table and click the edit (pencil) icon.
  3. Update any of the following fields:
    • Name
    • Bearer token — leave blank to keep the existing token
    • SSO client
    • Status
    • Note: The provider type cannot be changed after creation.
  4. Click Save.

Delete an identity provider

  1. Go to SettingsTeam settingsConnections and authenticationIdentity Providers.
  2. Find the IdP in the table and click the delete (trash) icon.
  3. Confirm the deletion.

What happens when you delete an identity provider:

  • The identity provider configuration is removed from Relayter.
  • Any SCIM users or groups that were previously synced from this IdP remain in Relayter but cannot be updated via SCIM.
  • Future SCIM API requests from your identity service will be rejected because the authentication provider no longer exists.
  • You can reconfigure a new identity provider and use the same name, but you must obtain a new bearer token from your identity service.