Settings
The Settings section is available within the Customer Dashboard (/dash/) and provides configuration options for identity, workspace management, and account preferences.
Identity & SSO
Configure Single Sign-On for your organization to enforce centralized authentication.
Adding a SAML Connection
- Navigate to Settings > Identity in the Customer Dashboard.
- Click Add Connection.
- Select your identity provider:
- Entra ID (Azure AD) — For Microsoft 365 organizations
- Okta — For Okta-managed identity
- Google Workspace — For Google-managed organizations
- Custom SAML — For any SAML 2.0 compliant provider
- Enter the required metadata:
- Entity ID — Your IdP’s SAML entity identifier
- SSO URL — The IdP’s single sign-on endpoint
- Certificate — The IdP’s X.509 signing certificate (PEM format)
- Download the Slim.io SP metadata to configure the reply URL in your IdP.
- Click Test Connection to validate the SAML flow.
- Click Activate to enforce SSO for your organization.
Activating SSO enforces it for all users in your organization. Ensure at least one admin account can still log in via email/password as a recovery mechanism before enabling SSO.
JIT Provisioning
When Just-In-Time (JIT) provisioning is enabled, users who authenticate via SSO for the first time are automatically created in Slim.io with a default Viewer role. Administrators can then promote users to Editor or Admin roles as needed.
Workspace Management
Workspaces provide logical isolation for different teams or business units within your organization.
Creating a Workspace
- Navigate to Settings > Workspaces.
- Click Create Workspace.
- Enter a name and optional description.
- Assign connectors to the workspace — each connector can belong to one workspace at a time.
- Add team members and set their roles (Admin, Editor, Viewer).
Role-Based Access Control
| Role | Permissions |
|---|---|
| Admin | Full access: manage connectors, run scans, edit policies, manage members |
| Editor | Operational access: run scans, view findings, edit classifiers and policies |
| Viewer | Read-only access: view dashboards, findings, and reports |
Workspace Isolation
Each workspace maintains independent:
- Connector assignments (a connector belongs to exactly one workspace)
- Scan history and findings
- Governance policies and drift events
- Quota consumption tracking
Organization-level administrators can view and manage all workspaces. Workspace-level admins can only manage their assigned workspace.
Account Preferences
- Display Name — Your name as shown in the dashboard and audit logs
- Email Notifications — Configure which events trigger email alerts (scan completion, policy violations, quota warnings)
- Timezone — Set your preferred timezone for scan scheduling and report timestamps
- API Keys — Generate personal API keys for CLI and programmatic access