Identity & Access
Keep your user list and groups in sync with Google Workspace, Microsoft Entra ID, or Okta.
An integration connects Surface to another company service. The first section is Identity & Access: syncing users and groups from your identity provider so the console’s Users page stays current.
Each app is a card under Identity & Access that reads Configure or Connected. Click a card to open its panel.
| App | How it works | Guide |
|---|---|---|
| Google Workspace | You sign in to Google once. Surface then reads group membership on a schedule | Connect Google Workspace |
| Microsoft Entra ID | Entra pushes users and groups to Surface over SCIM | Connect Entra ID or Okta |
| Okta | Okta pushes users and groups to Surface over SCIM | Connect Entra ID or Okta |
SCIM is the standard identity providers use to push user lists to other services.
Disconnecting
Open the card and click Disconnect, then confirm.
Single sign-on
Signing in to the console is email-first: a person types their work email and is sent to the right sign-in page. Setting up your company’s SSO is done with SuperAlign during onboarding.