SSO

Single sign-on (SSO) support is planned for enterprise workspaces. SSO will allow your team to authenticate with boveDAM using your organization's existing identity provider — without creating or managing separate boveDAM passwords.

Protocols and identity providers

boveDAM will support the two most widely adopted enterprise authentication standards:

• SAML 2.0 — the enterprise standard used by most corporate identity systems
• OIDC (OpenID Connect) — the modern OAuth 2.0-based protocol used by many cloud-native identity platforms

At launch, the following identity providers are planned to be supported out of the box:

• Okta — enterprise identity management with pre-built integrations
• Azure Active Directory (Microsoft Entra ID) — for organizations running Microsoft 365
• Google Workspace — for teams using Google as their identity layer

Configuration will be handled by workspace Owners from Settings → Security → Single sign-on. The setup flow will guide you through entering your identity provider's metadata URL or SAML configuration values.

What SSO enables

Team authentication without boveDAM accounts: Team members sign in to boveDAM using their corporate credentials — the same username and password they use for email, Slack, and other tools. No separate boveDAM password to manage or reset.

Central user management: When an employee leaves and their account is deactivated in Okta or Azure AD, their boveDAM access is revoked automatically. No manual cleanup required in boveDAM.

Enforced authentication policy: Your organization's existing password policy, multi-factor authentication requirements, and conditional access rules apply to boveDAM sign-ins automatically. IT teams maintain a single control point.

Just-in-time provisioning: When a new team member signs in to boveDAM via SSO for the first time, a boveDAM account is created automatically using their identity provider profile. No manual invitation step required for large teams.

Plan availability

SSO is planned as an Enterprise workspace feature. It will not be available on Starter, Studio, or Agency plans. Enterprise plan pricing and availability will be announced separately.

Register your interest

SSO has no confirmed release date. If SSO is a requirement for your organization to adopt boveDAM, contact hello@bovedam.com to register your interest and share your identity provider setup. Early feedback informs which providers are prioritized.

For related enterprise features, see API and webhooks and White-label.