trust

saml-sso

Single Sign-On (SAML 2.0)

Single Sign-On (SAML 2.0)

Centralize authentication and offboarding through your identity provider.

Centralize authentication and offboarding through your identity provider.

Applies to

OXVO Accounts

Domain

Identity & Access

Contact

security@oxvo.com

Overview

Single Sign-On (SSO) lets your team authenticate to OXVO using your organization's identity provider, improving access control and reducing password sprawl. SSO is especially valuable for regulated teams that require centralized login policies, conditional access, and rapid offboarding.

Controls & Practices

- SAML 2.0 support for common IdPs - Domain / organization level enforcement (plan dependent) - Centralized login policy management via your IdP - Recommended: pair with MFA at the IdP level

More trust controls

Browse related security, privacy, and reliability controls across OXVO.

Multi-Factor Authentication (TOTP)

Require a second factor to reduce the risk of account takeover.

Single Sign-On (SAML 2.0)

Centralize authentication and offboarding through your identity provider.

SCIM Provisioning (Enterprise)

Automate user lifecycle management from your identity provider.

Role-Based Access Control (RBAC)

Apply least-privilege access across admin, agent, and analyst workflows.

Audit Logs

Track security-relevant actions and configuration changes across your workspace.

API Tokens & Scoped Keys

Issue scoped access tokens for integrations with rotation and revocation.

Multi-Factor Authentication (TOTP)

Require a second factor to reduce the risk of account takeover.

Single Sign-On (SAML 2.0)

Centralize authentication and offboarding through your identity provider.

SCIM Provisioning (Enterprise)

Automate user lifecycle management from your identity provider.

Role-Based Access Control (RBAC)

Apply least-privilege access across admin, agent, and analyst workflows.

Audit Logs

Track security-relevant actions and configuration changes across your workspace.

API Tokens & Scoped Keys

Issue scoped access tokens for integrations with rotation and revocation.