SAML Single Sign-On and SCIM Directory Sync Come to WelcomeDesk

Ask any IT team to approve a new tool and the first question is the same: does it do SSO? For WelcomeDesk, the answer is now yes — along with automatic directory provisioning.

One identity, centrally controlled

WelcomeDesk now supports SAML single sign-on. Your team signs in with the same identity provider they use for everything else — Okta, Microsoft Entra / Azure AD, Google Workspace, OneLogin and more. No separate password to set, rotate or forget.

For IT that means access to your visitor system follows your existing joiner-mover-leaver process. Disable someone in your identity provider and their WelcomeDesk access goes with it — no orphaned logins sitting behind your audit log.

SCIM keeps your staff list in sync

SSO handles login; SCIM handles the accounts themselves. With SCIM provisioning, staff are created in WelcomeDesk automatically when they're added to the right group in your directory, and de-provisioned when they leave. Your host list stays accurate without anyone maintaining it by hand.

Built on WorkOS, configured in minutes

Rather than hand-roll SAML — a notorious source of security bugs — WelcomeDesk's SSO is built on WorkOS, a dedicated enterprise-auth platform. That gives you broad, well-tested identity-provider coverage from day one. Your IT admin connects your provider from the settings screen; there's no professional-services engagement and no multi-week project.

Available on Business

SAML SSO and SCIM provisioning are part of the Business plan. If a security review has ever stalled because a tool couldn't tick the SSO box, this is the release that clears it. Connect your identity provider from Settings and your whole team can sign in through it today.