Sign in with your IdP

Campus IT does not want another password list

Media programs still need desk access controls, but directory teams want login and lifecycle in the IdP. Identity features exist so gear-room ops and campus IT can meet in the middle—on Institution plans.

OIDC single sign-on

Configure your OIDC provider from Settings → Identity—issuer, client credentials, endpoints, scopes, group claim, and email domains. Compatible with common campus IdPs such as Entra ID, Okta, and Google Workspace.

• Workspace-scoped OIDC configuration
• Works with common campus IdPs
• Email domain and group claim controls

SCIM 2.0 lifecycle

SCIM Users and Groups support create, update, and deactivate with org bearer tokens. Provisioning covers day-to-day lifecycle; bulk SCIM operations are not offered.

• Create, update, and deactivate via SCIM
• Org bearer token authentication
• Day-to-day provisioning, not bulk SCIM ops

Group to role mapping

Map IdP groups to Gearlog roles (super admin through borrower) so media desks and AV cages stay permissioned correctly while inventory stays workspace-scoped.

Workspace-scoped inventory still holds

SSO does not flatten every room into one pile of gear. Identity controls who can sign in and which role they receive; workspaces still scope inventory and checkouts.

Who needs Institution

Choose Institution when campus IT requires IdP login and automated provisioning. Smaller rooms can run invites and roles on lower tiers until that requirement appears.

Common use cases

• Campus IdP login for equipment managers.
• Automatic deprovisioning when a student leaves the directory.
• Map an AV staff group to checkout staff without manual invites.
• Keep borrower vs desk roles aligned with existing IdP groups.

Related features