Sign in to Corma with SAML SSO

Corma now supports SAML 2.0 single sign-on, so your team logs in with your own identity provider alongside the existing Google and Microsoft sign-in methods.

• One connection per workspace: a workspace admin connects your provider once from Settings > Security > SAML, using the provider's metadata URL or XML file.

• Presets for the providers you already use: pick Okta, Google Workspace, Microsoft Entra ID, Keycloak or OneLogin from the provider dropdown, or connect any other SAML 2.0 provider through the "Other" option.

• Automatic provisioning on first sign-in: anyone your identity provider authenticates joins your workspace automatically as an employee, with no invitation and no seat to prepare in advance.

• Optional enforcement: once your connection is verified, "Enforce SAML for all members" blocks password, Google and Microsoft sign-in and sends everyone through your identity provider instead.

This means access to Corma itself can follow the same identity rules as the rest of your stack.

Enforcement requires an active SAML connection, and deleting the connection resets it, so a workspace can never lock itself out.

Start here: SAML SSO and How to set up SAML SSO, or go straight to your provider: Okta, Google Workspace, Microsoft Entra ID.

A more complete picture from Okta

Corma's Okta sync now keeps every field Okta returns, instead of discarding some of them along the way.

• Apps land in the right category: apps that were previously miscategorized, or that failed to match against Corma's catalog, now come through correctly.

• User groups come across too: with the new scopes in place, Corma can collect your Okta user groups.

• User Roles are now synced

• Corma can now provision and deprovision Okta users

This means what you see under Connectors > Okta now lines up with what you see in Okta.

Improvements

• Workflows and Audit logs are out of beta, and Workflows now sits in a new "Power up" section in the sidebar.

• Workflows have a new action: add a user to a bundle.

• Updating a license status is faster.

• Contract line items load faster and are more reliable.

Fixes

• Activating a workflow sending it back to draft has been fixed.

• Duplicating a workflow losing its branches and its trigger has been fixed, and a duplicated workflow now starts as a draft.

• CSV exports timing out on large files has been fixed.

• Several Cormie reliability issues, including actions failing to run, have been fixed.