Features
Sign in with your company account
Your people sign in through your identity provider, and you decide who gets in. Require it for your company’s addresses, let newcomers join with the right role, and let your identity provider add and remove people.
Get startedOn Agency.

Set up in four steps
- 1
Choose your provider
Google Workspace, Microsoft Entra ID, Okta, any OpenID Connect provider, or SAML 2.0.
- 2
Prove your domains
Add a DNS record to show the email domain is yours.
- 3
Try it
Sign in once yourself; nothing changes for anyone else.
- 4
Turn it on
Then require it, and choose how newcomers join.
What your security team gets
Built so a mistake can never lock you out: owners can always sign in.
- Providers
- Google Workspace, Microsoft Entra ID, Okta, OpenID Connect and SAML 2.0.
- Proven domains
- Only addresses on domains you proved by DNS can sign in this way.
- Required sign-in
- People with your company’s addresses must use it for this workspace; owners keep their way in.
- Joining
- Newcomers from your company join on first sign-in with the role and brands you choose, or need an invitation.
- SCIM provisioning
- Your identity provider adds people, keeps names up to date, turns them off and removes them; owners are never touched.
- History and data
- A full history on every ticket, customer data kept for the time you set, and every ticket exportable.
- More controls
- Custom roles, required two-step sign-in and allowed networks (Pro).
On Enterprise
Single sign-on and SCIM come with Enterprise. Custom roles, two-step sign-in rules and allowed networks come with Pro; ticket history and exports with every plan that has the inbox.
Questions
Which identity providers work?
Google Workspace, Microsoft Entra ID, Okta, any OpenID Connect provider (Auth0, Keycloak, OneLogin…) and any SAML 2.0 provider (ADFS, JumpCloud, PingFederate…).
Can we lock ourselves out?
No. Owners can always sign in with their password, so the workspace can always be reached.
What does SCIM do?
It lets your identity provider add people to the workspace when you assign them the app, and take them out when they leave.
Can SCIM add people from other companies?
No. Only addresses on your proven domains can be added.
Bring your company’s sign-in to Hivenza
