SAML SSO and SCIM for your AI visibility workspace
Proofsource supports SAML 2.0 and OIDC single sign-on and SCIM 2.0 provisioning, so your identity provider controls who can sign in and which role they get. Owners and admins set up the connection in Settings, map identity groups to workspace roles, and people are added or removed automatically as they join or leave. Built for enterprise IT and security teams.
SSO and SCIM, in short
The facts, ready to quote.
- SSO protocols
- SAML 2.0 and OIDC
- Provisioning
- SCIM 2.0 users and groups
- Group mapping
- Identity groups map to workspace roles
- Who sets it up
- Workspace owners and admins
- Fallback sign-in
- Email code or Google; no passwords
- Where
- Settings, Single sign-on
SAML and OIDC single sign-on. Owners and admins set up SAML 2.0 or OIDC single sign-on in Settings, and people sign in through your identity provider.
SCIM users and groups. SCIM 2.0 users and groups with a provisioning token and group-to-role mappings, so people are added and removed automatically.
SSO and SCIM provisioning, explained
Single sign-on (SSO) lets people sign in to a business tool through the company identity provider, such as Okta, Microsoft Entra ID or Google Workspace, instead of a separate account. SAML 2.0 and OpenID Connect (OIDC) are the two standard protocols. SSO gives IT one place to enforce multi-factor sign-in and to cut access when someone leaves.
SCIM (System for Cross-domain Identity Management) handles the other half: it creates, updates and removes user accounts and group memberships automatically from the identity provider. Without SCIM, someone has to remember to remove a departing employee from every tool by hand.
In Proofsource, owners and admins add an SSO connection with SAML or OIDC, then turn on SCIM with a provisioning token. Groups from your identity provider map to Proofsource roles, so a person added to your marketing group arrives as a Member and a person in the executive group arrives as a Viewer. Removing someone in the identity provider removes them from the workspace.
How it works
Connect Proofsource to your identity provider with SAML 2.0 or OIDC single sign-on and SCIM 2.0 user and group provisioning.
Open Single sign-on
Owners and admins open Settings, Single sign-on. A fresh code confirms the change.
Add a connection
Choose SAML 2.0 or OIDC and paste the details from your identity provider.
Create a SCIM token
Turn on SCIM provisioning beside SSO and give the token to your identity provider.
Map groups to roles
Map identity groups to Proofsource roles such as Admin, Member or Viewer.
Let it sync
Joiners, movers and leavers update in Proofsource as they change in your identity provider.
See it in the product
Screens from the Proofsource app, drawn with sample data for an example brand.
| Identity group | Proofsource role | People |
|---|---|---|
| marketing | Member | 12 |
| marketing-leads | Admin | 3 |
| exec | Viewer | 5 |
Who it is for
One place to grant and revoke
Access follows your identity provider, so offboarding removes Proofsource access with everything else.
Roles that follow the org chart
Group mappings give each team the right Proofsource role without manual invites.
Meet the SSO requirement
SAML and OIDC support answers the standard security questionnaire line.
Why it matters
Central control
Your identity provider's sign-in rules apply to Proofsource.
Automatic offboarding
Leavers lose access when they are removed upstream.
Right role on day one
Groups map to roles, so new people land with the right access.
Google AI OverviewsGoogle AI Mode
SSO and SCIM: Proofsource and other tools
Enterprise sign-in is common among AI visibility platforms. From each company's own public pages:
| Capability | Proofsource | Profound | AthenaHQ | Scrunch | Peec AI | Otterly.AI | Writesonic |
|---|---|---|---|---|---|---|---|
| SAML or OIDC single sign-on | YesSAML 2.0 and OIDC | YesEnterprise; per-organization Okta sign-in linksSource | YesSAML and OIDC on Enterprise (Okta, Ping and more)Source | YesSAML/OIDC SSO on EnterpriseSource | YesSSO on EnterpriseSource | YesSSO on the Enterprise planSource | YesSSO/SAML on EnterpriseSource |
| SCIM provisioning | YesSCIM 2.0 users and groups | YesRole-based access and SCIM provisioningSource | Not listed | Not listed | Not listed | Not listed | Not listed |
| Groups mapped to roles | YesIdentity groups decide the role each person gets | RelatedRole-based accessSource | RelatedRole-based access controlSource | RelatedRBACSource | RelatedRole-based accessSource | Not listed | Not listed |
Where each of them shines
Profound offers SSO, SCIM and role-based access for enterprise teams, with SOC 2 Type II. Compare in full
AthenaHQ supports SAML and OIDC with providers like Okta and Ping, plus an audit log.
Scrunch offers SAML and OIDC on Enterprise alongside SOC 2 Type II. Compare in full
Peec AI includes SSO on Enterprise with unlimited seats. Compare in full
Otterly.AI offers SSO on Enterprise with a dedicated customer success manager. Compare in full
Writesonic offers SSO and SAML on its Enterprise plan.
Questions about SSO and SCIM
Does Proofsource support SAML single sign-on?
Yes. Proofsource supports SAML 2.0 and OIDC single sign-on, set up by workspace owners and admins in Settings.
Which identity providers work with Proofsource?
Proofsource uses the SAML 2.0 and OIDC standards, so identity providers that support them, such as Okta and Microsoft Entra ID, can connect.
Does Proofsource support SCIM?
Yes. SCIM 2.0 provisions users and groups, using a token you create beside the SSO settings.
How do roles get assigned with SCIM?
You map identity groups to Proofsource roles. People in a group receive that group's role.
What happens when someone leaves the company?
When your identity provider removes them, SCIM removes them from the workspace too.
Can people still sign in without SSO?
People sign in with a one-time email code or Google. There are never passwords in Proofsource.
Do changes to SSO need extra confirmation?
Yes. Sensitive changes ask for a fresh sign-in code first.
Keep exploring
Try it on your own brand.
Proofsource is live: scan your brand and see SSO and SCIM at work with your own answers, competitors and sources.
Google AI OverviewsGoogle AI Mode