The documentation recommends reaching out to support@braintrust.dev when you want to set up an SSO integration. In order to do so, we'll need you to first let us know the Identity provider (IdP) your organization uses. Per the documentation, we support the following options:

• SAML

  • Okta Workforce

  • Microsoft Entra ID

  • Google Workspace

  • Custom SAML provider

• OpenID Connect (OIDC)

  • Custom OIDC provider

Requirements

• The first step would be to clarify to support the IdP you will be using.

• The domain to configure, we can configure more than one, let us know all domains needed.

• If you'd like to enable IdP-Initiated flow

Depending on the IdP in user, please be prepared to provide the following details:

Okta Workforce

• The metadata URL, or in its place:

  • Identity Provider Single Sign-On URL

  • Identity Provider Issuer

  • The SSL/TLS certificate to use

Microsoft Entra ID

• The metadata URL, or in its place:

  • Login URL

  • Microsoft Entra Identifier

  • The SSL/TLS certificate to use

Google Workspace

• The metadata URL, or in its place:

  • SSO URL

  • Entity ID

  • The SSL/TLS certificate to use

Custom SAML provider

• The metadata URL, or in its place:

  • SSO URL

  • Entity ID

  • The SSL/TLS certificate to use

Custom OIDC provider

• The Discovery Endpoint, or in its place:

  • Authorization URL

  • Token URL

  • User Info URL

• Client ID

• Client Secret

• Scopes (if any)