SAML
One identity for every MCP server and skill
Enterprises already manage identity in one place, and AI access should fit that, not work around it. With SAML single sign-on, your people log in once and get access to the MCP servers and skills their role allows, with everything tied back to the identities and groups you already manage.
- 01
Log in once.
People sign in with your identity provider and reach everything they're permitted to use, without separate logins for each MCP server.
- 02
Match access to roles.
Access is based on the identities and groups you already manage. Permissions reflect real roles instead of a separate list.
- 03
Work within governance.
SAML is fully integrated with Metorial's access control and policies. Identity and permissions stay connected.
What SAML gives you
Enterprise identity, applied to AI
- Logins per personOne
- Access basisRoles and groups
- Integrated with access controlYes
- Group importSupported
Sign in once. Use your company identity. Reach what your role allows. Manage it all in one place.
FAQ
Answers to common questions about saml and how they fit into governed AI agent infrastructure.
What is SAML in Metorial?
SAML is single sign-on for your organization. People authenticate through your identity provider and get access to the MCP servers and skills their role allows, without separate per-tool logins.Does SAML work with my existing identity provider?
Yes. SAML connects Metorial to your identity provider so access is based on the identities and groups you already manage.Can I import groups?
Yes. Group import is supported. The roles and groups in your identity provider map to access in Metorial.How does SAML relate to access control?
SAML is fully integrated with Metorial's policies and access control. Authenticated identity drives what each person can use.How is SAML different from SSO for providers?
SAML is how people sign in to Metorial with your identity provider. SSO for providers is about reaching the underlying MCP servers without logging in to each one separately. They work together.Does signing in with SAML mean handling tokens?
No. Combined with tokenless auth, people get access based on identity without managing API keys or secrets for each MCP server.