One identity provider. Every workspace. Zero shadow access.
SAML 2.0, OIDC and SCIM 2.0 wired directly into your IdP. Hire, promote and offboard from Okta or Entra and ScoreReview updates within seconds — with a full audit trail.
Everything you need, animated into one workflow.
SAML 2.0 & OIDC
Pre-tested against Okta, Microsoft Entra ID, JumpCloud, Google Workspace, OneLogin and Auth0.
SCIM 2.0 lifecycle
Create on hire, update on role change, deprovision on offboard — fully automated and reversible.
Just-in-time access
First-time IdP users land in the right workspace with the right scoped role on first login.
Group → role mapping
Map IdP groups to platform roles down to per-brand and per-feature permissions.
Session governance
Force re-auth, idle timeout and IP allow-lists configured per workspace.
Immutable audit log
Every login, role change and SCIM event recorded for 7 years with SIEM export.
Watch lifecycle events in real time.
Each tier represents a permission boundary — provisioning, role, scope and audit. When your IdP pushes a change, all four light up within seconds.
From metadata exchange to enforced enrollment.
Exchange metadata
Upload IdP metadata or use our pre-built Okta / Entra apps.
Map groups
Pick which IdP groups become Admin, Brand Manager, Analyst or Viewer.
Enable SCIM
Generate a SCIM token and let your IdP push the directory.
Enforce
Disable password fallback and require SSO for the whole workspace.
Enterprise identity, not an upsell tax.
SSO and SCIM are included on every Business and Enterprise plan.
| Capability | ScoreReview | Trustpilot | Yotpo |
|---|---|---|---|
| SAML 2.0 included | |||
| SCIM 2.0 included | |||
| OIDC support | |||
| Per-brand role scopes | |||
| Session governance | |||
| Audit log export |
The most common identity workflows our customers automate.
- Auto-grant analyst access to every newly onboarded brand
- Deprovision contractors the moment they leave the IdP group
- Force SSO-only and disable password fallback per workspace
- Route SOC team alerts on any privileged role grant
- Restrict admin access to corporate IP ranges and approved devices
- Export audit events to Splunk, Datadog or your SIEM of choice
What IT and Security ask before turning on SSO.
Any SAML 2.0 or OIDC compliant provider. We maintain prebuilt apps for Okta, Entra ID, Google Workspace, JumpCloud, OneLogin and Auth0.
Wire ScoreReview into your IdP today.
Our Solutions Engineering team configures the first IdP with you, live.