Overview Team management & SSO Roles Admins use the Admin Console: policy, inventory, activity, billing. Developers use the Sentilai Endpoint on their machines; they don't need console access. Both take a seat. Your plan's seat limit and current usage are on the Billing page. Invites & passkeys Invite by email: the invitee gets a passkey setup link — they register a passkey and are in. No passwords anywhere in Sentilai. A backup passkey can be added from Account settings; admins can issue a new setup link if a device is lost. Enterprise SSO Connect your identity provider (Okta, Entra ID, Google Workspace, or any OIDC/SAML IdP) with the guided SSO wizard: pick the provider, follow the tailored steps, validate the connection with a live test login, and switch enrollment to SSO. New team members then sign in with your IdP — accounts are provisioned on first login (JIT). Session security Sign-ins use phishing-resistant credentials (passkeys or your IdP's own MFA). Device credentials are separate, rotated, and revocable per device from the console.