Is user provisioning enabled?
Yes, user provisioning is turned on (when SSO is enabled). When a user attempts to log in via SSO and their identity is verified by the Identity Provider (IdP), user will be automatically created in our system if user does not already exist. Email, first name, and last name will be set based on the parameters provided in the IdP configuration. (Note: The email is derived from the NameID in the IdP settings.)
Is SSO login enforced?
Partially. If a user attempts to log in with a work email associated with a domain connected to SSO, they will be redirected to the Identity Provider for authentication. However, users can still log in using social logins. If your IdP is Google, users will also be able to log in via Google social login button.
Additionally, users can log in with personal emails since our policy does not strictly bind accounts to work emails (as work emails can change).
Does SSO deprovision users?
No, SSO does not actively deprovision users. The only restriction is preventing login with a deactivated work email. However, users who have set up a personal email can still access their accounts.
If you need more control over team membership, we recommend using SCIM integration, which allows you to sync users with your billing team and manage subscription access more effectively.
SSO is enabled, but some users can still log in via email. Why?
Yes, this is expected. Billing team owners and admins can still log in via email, even when SSO is enabled/enforced.
What happens if my Identity Provider is down and users cannot log in?
In case of an IdP outage, billing team owners and admins can still log in using their email and temporarily disable SSO until the issue is resolved.
Does SellerCrowd support Single Logout (SLO)?
No, Single Logout (SLO) is not currently supported. If this feature is critical to your organization, please let us know - we may consider adding it in the future.
What does SCIM integration handle?
SCIM allows you to manage your billing team only. With SCIM, you can automatically add or remove users from your billing team, ensuring only authorised team members benefit from your team or enterprise subscription. However, SCIM does not completely remove user accounts.
Does SCIM impact my subscription cost?
It might. Actions performed via SCIM have the same effect as changes made manually in your team management page. Adding new members may increase your billing amount, depending on your subscription plan.
Does SCIM support groups?
No, SellerCrowd does not support SCIM groups.
I don’t see the SSO/SCIM configuration in my settings. Where can I find it?
SSO and SCIM settings are only accessible to billing team owners and admins in the My Team settings page.
I’m having trouble setting up SSO/SCIM. What should I do?
First, please review the setup instructions available here and here. If you’re still experiencing issues, contact our tech team directly at techsupport@sellercrowd.com. Upon request, we can also extend our setup guides to support additional Identity Providers.