configuring-sso-and-scim
Configures SSO authentication and SCIM 2.0 provisioning for CockroachDB across four distinct layers — Cloud Console SSO (SAML/OIDC), DB Console SSO (OIDC), SQL/Cluster SSO (JWT or LDAP/AD), and SCIM 2.0 automated provisioning. Use when enabling centralized identity management, setting up SSO for compliance, or automating user lifecycle management.
- Version
- 2.0
- Compatibility
- Requires CockroachDB Cloud organization admin for Console SSO/SCIM. Requires cluster admin for DB Console and SQL SSO configuration. DB Console SSO requires Advanced or Enterprise plan (not available on Standard/Basic). LDAP/AD authentication is self-hosted only (not available on CockroachDB Cloud). SCIM 2.0 requires Enterprise plan.
Pinned to revision 4e8964e24a5a, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/configuring-sso-and-scim/SKILL.md
- skills/configuring-sso-and-scim/cockroachdb-security-and-governance/auditing-cloud-cluster-security/SKILL.md
- skills/configuring-sso-and-scim/cockroachdb-security-and-governance/enforcing-password-policies/SKILL.md
- skills/configuring-sso-and-scim/cockroachdb-security-and-governance/managing-tls-certificates/SKILL.md
- skills/configuring-sso-and-scim/references/configuration-steps.md
Every link opens the file at its source, pinned to the revision this page describes.