# Security

> SAML single sign-on, SCIM provisioning, the audit log and third-party application controls.

Source: https://docs.linefold.app/security

## SAML

Members sign in through your identity provider (Okta, Google Workspace, Microsoft Entra ID…). Set it up in
**Settings › Security › SAML authentication & SCIM provisioning** with your provider's metadata.

## SCIM

Your identity provider creates, updates and deactivates members, and syncs groups to teams. Turn it on after SAML, on the same
page, and give your provider the URL and token it shows.

## Audit log

Security events (sign-ins, member and role changes, settings, API keys, applications) with who, when and from where. Owners
read and export it in **Settings › Audit log**, or stream it to a webhook.

## Third-party applications

An application you authorize acts in your workspace within the scopes you grant; what it does with the data is governed by
its own terms. Admins can require **approval** before members connect one, and revoke any connection in
**Settings › Applications**. You revoke your own in **Settings › Account › Security & access**.