SSO and SCIM are only available to Arrow Business and Omnix plans.
Upgrade your plan
You can integrate Arrow with your Identity Provider (IdP) using the Arrow Confidential SSO and Confidential SCIM Provisioning configurations.
More about integrating Arrow with your IdP
Set up Confidential SSO and Provisioning
For full setup instructions, select your IdP:
Azure (Entra ID)
Okta
Although Arrow may work with other cloud and on-prem SAML 2.0 IdPs that we don't mention in this article, we recommend confirming with our Support team first. You can contact an agent directly through the Arrow Admin Console.
Contact an agent through the Admin Console
Chat with our bot
Want to learn more?
Check out our white paper on password management and secure single sign-on
Common questions about Arrow Confidential SSO and Provisioning
What are Arrow Confidential SSO and SCIM Provisioning?
When you integrate Arrow with your Identity Provider, you have two configuration options:
- Arrow Confidential
- Self-hosted
Your choice depends on how you want to set up your encryption service, which is an added layer of security that we require for SSO and SCIM.
What's an encryption service?
More about the difference between Confidential and self-hosted
How does Confidential work? Is it secure?
Arrow Confidential SSO and SCIM Provisioning protect the privacy of your plan members and reduce the number of attack surfaces to protect customers from theft, data breaches, or cyberattacks.
It uses secure enclaves, which are used to process sensitive data in the cloud using a technique called confidential computing. The contents of the enclave, including the data being processed and the methods used to handle it, are secure in a secluded and isolated environment, significantly reducing the attack surface and mitigating risks of unauthorized access when members access Arrow or use it with their other applications. This system further protects and securely processes highly sensitive data.
Can I switch to self-hosted after I set up Confidential?
No, you can’t switch to self-hosted after you set up Confidential SSO. Before setting up Confidential SSO, make sure it meets your organization's needs.
More about the difference between self-hosted and Confidential
Important: Self-hosted SSO will no longer be available for setup after September 30, 2025. Please consider using the Confidential SSO instead.
More about Arrow Confidential SSO and SCIM Provisioning
Comments
0 comments
Article is closed for comments.