Team & Access
Control who can do what — roles, 2FA, SSO via OIDC or SAML, group-to-role mappings, and SCIM provisioning.
How to Invite Team Members and Assign Roles
Invite users via email, understand the role hierarchy (member, manager, admin, owner), and configure what each role can access.
How to Set Up Two-Factor Authentication for Your Organization
Enable 2FA with authenticator apps, generate recovery codes, and reset 2FA for team members as an admin.
How to Configure SSO/OIDC for Your Organization
Set up single sign-on with your identity provider, configure OIDC settings, and manage the SSO login flow.
How to Configure SAML 2.0 SSO
Set up SAML-based single sign-on with enterprise identity providers like ADFS, CyberArk Identity, BeyondTrust, or Okta.
How to Set Up SSO Group-to-Role Mappings
Automatically assign Chainsaw roles based on IdP group claims, so users get the right permissions on every SSO login.
How to Configure SCIM Provisioning
Automate user provisioning and deprovisioning from your identity provider using SCIM 2.0.
Most of this section is one-time setup that pays off forever: get identity and access right and the rest of governance becomes routine. The guides move from roles and 2FA through single sign-on (OIDC, SAML, group→role mappings) to SCIM provisioning — so your IdP drives who has access and who gets deprovisioned.
Let your IdP be the source of truth. Once SSO plus group→role
mappings plus SCIM are in place, joiners and leavers are handled by your
directory — no manual account churn in Chainsaw.
Where to next
To issue and rotate credentials for AI agents (a peer of human access), see AI Assistant (Billy) & Agents; for service-token credentials, see Getting Started.