# Identity providers

> An identity provider connection signs a customer's users in to Bonnard through Microsoft Entra ID, Okta, Auth0, WorkOS, Google Workspace, or Generic OIDC.

Updated: 2026-11-09

Connect the identity provider a customer runs, so its people sign in with their work accounts. You need the Admin role
in your workspace.

## Providers

The console at `app.bonnard.ai` offers these providers:

- Microsoft Entra ID
- Okta
- Auth0
- WorkOS
- Google Workspace
- Generic OIDC

## Sign-in methods

An identity provider connection holds these methods on its **Overview** tab:

Table: Sign-in methods on a connection

| Method | What it does |
| --- | --- |
| **Customer SSO login** | Customers sign in with their identity provider account |
| **Trusted issuer** | Bonnard accepts access tokens from the identity provider |
| **Email code fallback** | Customers with no SSO or Trusted issuer sign in with an emailed code |

## Set one up

1. In the console, select **Settings**, then **Identity**.
2. Select **Connect a provider**. If a connection exists, open **Manage connections** and select **+ Add connection**.
3. Select the provider.
4. Enter the **Connection name** and the values the form asks for.
5. Select **Create connection**.
6. On the **Overview** tab, set each sign-in method you want to on. Where a row shows **Set up**, select it and save its values first.

[Image: The Add connection provider grid: Microsoft Entra ID, Okta, Auth0, WorkOS, Google Workspace, and Generic OIDC]

[Get in touch](https://bonnard.ai/get-in-touch) for help with any of these providers or Trusted issuer.

## The Connection tab

The **Connection** tab holds the API key that the directory uses and the **Delete** button. Deleting a connection ends
access for customers who sign in through it. Their customer records stay.

## Synced organisations

A synced organisation becomes a customer in Bonnard, and its users stay current. It has no tenant (the value that marks
its data in your database, set as its Tenant ID) and no access grant until you add them.

1. Open the connection's **Directory** tab.
2. Select **Manage organizations**, or **Add organizations** if none sync.
3. Select **Refresh**. If it asks for the provider's API key, enter it and select **Verify & continue**.
4. Select each organisation to sync.
5. Select **Save changes**.

To stop, clear the organisation, select **Save changes**, then select **Stop syncing**. Bonnard ends that customer's
access, sessions, and API keys, and archives the customer. You can select the organisation again later to restore sync.

## Who does what

An Admin in your workspace connects the provider, and the customer's people sign in with it. See
[Get customers signed in](https://bonnard.ai/docs/customers/customer-sign-in.md#sign-in-through-an-identity-provider) for their steps.