Single sign-on

Connect your identity provider and your people sign in with the account they already have. Vulmon Recon supports SAML 2.0 single sign-on with Microsoft Entra ID and Okta, plus SCIM 2.0 provisioning so your identity provider can create, update and deactivate users on its own.

A connection covers one or more of your email domains. You can require single sign-on for those domains, so the password path disappears for them, and you decide whether people are provisioned automatically on first sign-in or must already have been granted access.

Sign-in is email-first: someone enters their address, and if its domain has an active connection they are sent to your identity provider instead of being asked for a password. Starting from your provider's own application portal works too.

Single sign-on and SCIM are included in every plan — like every other capability, they are not held back for a higher tier.