Team management and SSO
Admins, developers, seats, invites, enterprise SSO.
Overview
Team management & SSO Roles Admins use the Admin Console: policy, inventory, activity, billing. D...
Invite an admin
Admins manage the organization: policy, providers, people, billing. They do not need the Endpoint...
Invite a developer
Developers are the people whose AI tools you're governing. A developer invite grants no console a...
Resend a passkey link
Use this when someone can't sign in because their passkey is gone — a lost or wiped laptop, a rep...
Offboard a developer
One action for "this person has left". Classic offboarding checklists cover email and VPN but nev...
Set up single sign-on
SSO lets your wider developer team sign in with the identity provider you already run — Google Wo...
The SSO enrollment wizard
Connecting your identity provider is eight steps, and the wizard will not let you activate someth...
Configure your identity provider
What step 3 of the wizard needs, by provider. Google Workspace Client ID and client secret from a...
Provisioning and approval
Step 6 of the wizard, and the decision that determines who can walk in. Default role for new sign...
Passkeys explained
Sentilai has no passwords. Not "passwords plus MFA" — no password field exists anywhere. This sur...
When someone cannot sign in
The common cases, in the order they actually occur. "This account can't open the admin console" T...