SSO, SCIM, and the security questions procurement asks

SSO providers we support

• Okta — SAML and OIDC, with SCIM 2.0 provisioning.
• Microsoft Entra ID (Azure AD) — SAML and OIDC, with SCIM 2.0 provisioning.
• Google Workspace — SAML, with directory sync via SCIM-compatible adapter.
• JumpCloud — SAML and OIDC, with SCIM 2.0 provisioning.
• OneLogin, Duo, PingFederate — SAML supported, SCIM via standard protocol.
• Generic SAML / OIDC — any spec-compliant IdP works.

How SCIM provisioning works

When a teammate is added to your provisioning group in your IdP, they get a SEONova seat automatically — no invite email needed. When they're removed from the group (or their employment ends), their seat is deprovisioned within minutes. No ex-employee access to worry about, no manual cleanup.

Where the security docs live

• SOC 2 Type II report — available under NDA; request from /security.
• ISO 27001 certificate — public download from /security.
• CAIQ-Lite questionnaire — pre-filled; available without NDA from /security.
• Penetration test summary — annual; available under NDA.
• DPA + sub-processor list — public from /security.
• Status page + incident history — status.seonova.io (public).

EU data residency

Enterprise plans can opt in to EU data residency — all your workspace data is stored exclusively in our Frankfurt region, never replicated outside the EU. Configure at workspace creation, or migrate an existing workspace via support (downtime: zero, transfer time: 24-48h depending on data volume).