Microsoft Entra SSO
- Sign in with existing Entra ID accounts
- No separate BondiByte password
- Branded login screens
- Controlled, traceable emergency access
Single sign-on & SCIM
Single sign-on and automated provisioning, built for larger providers.
As a provider grows, setting up and removing access by hand stops working. BondiByte connects to your identity provider so access reflects who is in your directory and what groups they belong to.
Sign in with Microsoft Entra ID, provision and remove staff automatically with SCIM 2.0, and map your groups to both BondiByte roles and site access.
Access should follow your directory.
SCIM 2.0 provisioning
- Provision accounts on join
- Deprovision on leave
- One identity source of truth
- Scheduled directory sync
Map groups to roles
- Entra groups to BondiByte roles
- Owner, admin, manager, staff
- People land in the right role
- No manual setup
Map groups to site access
- Entra groups to site access
- Reach only the right sites
- Team moves handled automatically
- Controlled from your directory
Two mappings that save real admin
Map once, and access keeps itself current.
Most tools stop at mapping groups to roles. BondiByte also maps groups to site access, so a worker who moves between teams gets the right role and the right sites without anyone editing access by hand.
Scheduled directory sync keeps users, roles, and site access aligned over time, so access does not drift between manual reviews.
Provision on join. Deprovision on leave. Access follows your directory.
- Your directory
- Provision on join
- Role assigned
- Site access mapped
- Kept in sync
The safeguards behind automated provisioning.
Handing account management to a directory only works if the directory cannot overreach. These limits are properties of the product, not settings.
Sensitive roles never come from the directory
SCIM can never grant Owner, Admin or billing-level roles. Group mapping grants the Manager role at most; anything more senior is only ever assigned by a person inside BondiByte, by deliberate design.
Your staff allowance is respected
New activations are checked against your plan's staff allowance, so a directory change cannot silently grow your bill.
Connection tokens you control
Generate, rotate and revoke the tokens that let your directory talk to BondiByte, with usage tracked. Revoking a token stops further changes instantly without touching existing users.
A full provisioning log
Every action SCIM takes is recorded and viewable, so you can always see what your directory did and when.
Leavers are switched off, not erased
Remove someone in your directory and their BondiByte access is deactivated. Their records stay in your workspace for history and compliance.
Frequently asked questions.
What is SCIM, in plain terms?
SCIM is the open standard identity systems use to create, update and deactivate user accounts in the apps a business runs. It is how your directory manages BondiByte access for you.
Which identity providers are supported?
Microsoft Entra ID. Both SCIM provisioning and Microsoft single sign-on are built around it.
Can SCIM make someone an Owner or Admin?
No, deliberately. Group mapping can grant the Manager role at most; Owner, Admin and billing roles can only be granted by a person inside BondiByte.
What happens when someone leaves?
When their assignment is removed in your directory, their BondiByte access is deactivated automatically. Their records remain in your workspace for history and compliance.
Is setup self-service?
It is configured for your organisation with your Microsoft administrator involved and BondiByte coordinating, so identity details are handed over safely rather than through email or chat. The SSO and SCIM guide walks through the process.
Go deeper into identity.
Each of these has its own page: why it exists, how it works, and the controls that stay with managers.
Feature
SCIM auto-provisioning
SCIM is the open standard identity systems use to manage user accounts in connected apps. Connect it to Microsoft Entra ID and BondiByte stays in…
Explore SCIM auto-provisioningFeatureRoles & permissions
Configure roles and permissions so each user sees and does exactly what they should.
Explore Roles & permissionsBring your identity provider, and let access follow it.
Start your free trial, or book a demo to walk through Microsoft Entra SSO, SCIM provisioning, and group-to-role and group-to-site mapping for your provider.