Identity Governance

Enterprise Identity Baseline & SCIM v2.0

Connect your enterprise identity provider, enforce multi-factor authentication, and synchronize user lifecycles automatically via standards-compliant SCIM v2.0.

Federated Directory Synchronization & SSO

BlackShield supports standards-compliant SAML 2.0 and OpenID Connect (OIDC) authentication paired with SCIM v2.0 directory synchronization. Employee onboarding, team changes, and deprovisioning occur in real-time without manual administration.

SCIM v2.0 Bridge

Implements /scim/v2/Users and /scim/v2/Groups endpoints compatible with Okta, Microsoft Entra ID, and Ping.

Sole Admin Protection

Strict governance safeguards reject deprovisioning or deactivation of the last remaining workspace owner.

Scoped Bearer Tokens

SCIM bridge credentials use hashed SHA-256 tokens scoped strictly to directory mutation endpoints.

Bridge Setup

  1. Navigate to Identity & Access → Directory Sync.
  2. Click Configure SCIM Bridge to generate your tenant-specific endpoint URL and bearer token.
  3. Paste the SCIM Base URL (https://api.blackshield.chaplau.com/api/v1/scim/v2) into your IdP application.
  4. Assign groups to the BlackShield application in your IdP to initiate automated synchronization.
Open Identity Settings →
Enterprise Identity Baseline & Directory Sync (SCIM v2.0)