SSO and SCIM
A Terraform Enterprise alternative with nothing to install.
StackShip is a managed OpenTofu platform with enterprise identity built in: SSO, SCIM, roles, required approvals, and an audit log for every organization.
Identity and access
Enterprise identity for OpenTofu teams.
- 01
Enterprise SSO
Okta, Microsoft Entra ID, Google Workspace, and other OIDC or SAML providers.
- 02
SCIM provisioning
Users are created, updated, and deactivated from your identity provider.
- 03
Roles and approvals
Owners and admins approve. Members propose changes.
- 04
Audit log
Every decision, override, and download is recorded.
- 05
Organization isolation
Data in one organization is never visible from another.
- 06
Scoped tokens
OpenTofu logins, CI tokens, and agents each get scoped access.
Sign-in methods
Every sign-in method, every organization.
- Email and password
- OIDC SSO
- SAML 2.0 SSO
- SCIM provisioning
- OAuth for tools and agents
Roles
Three roles. Clear limits.
- Owner
- Everything, for the people accountable for the organization.
- Admin
- Everything, including members, credentials, policies, and approvals.
- Member
- View everything and start runs. Can't approve or apply.
FAQ
SSO and SCIM questions
Does StackShip support SAML SSO?
Yes. StackShip supports SSO with OIDC and SAML 2.0 identity providers, including Okta, Microsoft Entra ID, and Google Workspace.
Does StackShip support SCIM provisioning?
Yes. SCIM 2.0 creates, updates, and deactivates StackShip accounts from your identity provider. Deactivating a user signs them out of every session.
How do I set up SSO and SCIM?
Email support@stackship.run with your organization slug, protocol, and email domains. Our team configures the connection with you.
Do SSO and SCIM cost extra?
No. SSO and SCIM are included for every organization at no cost.
How is StackShip different from Terraform Enterprise?
StackShip is a managed service, so there is no server to install, upgrade, or back up. Runs execute on managed, isolated runners.
Get started
Run your first plan today.
Free for every organization. Sign up with email or Google.