Skip to content

Configure an Identity Provider ​

Identity Providers (IdPs) use SCIM (System for Cross-domain Identity Management) v2 to connect your organization's identity service to Relayter. When configured, IdPs can work alongside SSO clients to enable sign-in flows and user provisioning.

Add an identity provider ​

  1. Go to Settings → Team settings → Connections and authentication → Identity Providers.
  2. Click Add identity provider.
  3. In the modal, enter the configuration details:
    • Name — a label for this IdP (e.g., "Corporate SCIM" or "Okta Directory"). Must be unique within your team.
    • Type — Relayter supports SCIM v2
    • Bearer token — the authentication token from your IdP (minimum 32 characters). This token is securely stored and used to authenticate SCIM API requests.
    • SSO client (optional) — if you want to link this IdP to an existing SSO client, select it from the dropdown
    • Status — toggled Active by default
  4. Click Save.

Your team can have only one SCIM v2 identity provider at a time.

Understand identity provider fields ​

  • Type: Relayter currently supports SCIM v2. This standard protocol allows your IdP to provision and manage user and group identities in Relayter.
  • Name: A unique, friendly name for this identity provider configuration within your team. If you delete and recreate an IdP, you can reuse the same name.
  • Bearer token: A secure token provided by your identity service. The token is encrypted and never exposed in the UI. Treat it as a secret and do not share it.
  • SSO client: Optionally links the IdP to an SSO client, enabling coordinated sign-in flows that use the configured identity provider.
  • Status: When active, the IdP is available for SCIM API operations. When inactive, SCIM requests will be rejected.

Edit an identity provider ​

  1. Go to Settings → Team settings → Connections and authentication → Identity Providers.
  2. Find the IdP in the table and click the edit (pencil) icon.
  3. Update any of the following fields:
    • Name
    • Bearer token — leave blank to keep the existing token
    • SSO client
    • Status
    • Note: The provider type cannot be changed after creation.
  4. Click Save.

Delete an identity provider ​

  1. Go to Settings → Team settings → Connections and authentication → Identity Providers.
  2. Find the IdP in the table and click the delete (trash) icon.
  3. Confirm the deletion.

What happens when you delete an identity provider:

  • The identity provider configuration is removed from Relayter.
  • Any SCIM users or groups that were previously synced from this IdP remain in Relayter but cannot be updated via SCIM.
  • Future SCIM API requests from your identity service will be rejected because the authentication provider no longer exists.
  • You can reconfigure a new identity provider and use the same name, but you must obtain a new bearer token from your identity service.