skills.rest
cockroachdb
cockroachdbOFFICIAL
Explore all skills by this author →
WebsiteGitHub

configuring-sso-and-scim

Configure SSO and SCIM integration for CockroachDB across Cloud Console, DB Console, and SQL/Cluster.

3|3|Updated Mar 11, 2026
Search Tags:#sso#scim#idp#cockroachdb#cloud-console#cluster-authentication
One-click install
npx skills add https://github.com/cockroachdb/claude-plugin --skill configuring-sso-and-scim
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: configuring-sso-and-scim
Source: https://github.com/cockroachdb/claude-plugin/tree/main/skills/security-and-governance/configuring-sso-and-scim
Command: npx skills add https://github.com/cockroachdb/claude-plugin --skill configuring-sso-and-scim

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Centralized identity management and automated provisioning for CockroachDB across Cloud Console, DB Console, and SQL/Cluster, enabling consistent access control and lifecycle management.

Core Features & Use Cases

  • Configure Cloud Console SSO (SAML/OIDC), DB Console SSO (OIDC), and SQL/Cluster SSO (JWT/LDAP) in a single workflow.
  • Enable SCIM 2.0 provisioning to automate user lifecycles between your IdP and the Cloud Console.
  • Define safe rollback and safety checks to prevent administrator lockouts during enforcement.

Quick Start

Configure your IdP connections in Cloud Console, enable the required SSO/SCIM layers, and test login flows end-to-end.

Frequently Asked Questions about configuring-sso-and-scim

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure SSO and SCIM for CockroachDB across different deployment layers?▼

Configure SSO and SCIM by applying cluster settings and HBA rules across Cloud Console, DB Console, and SQL/Cluster. This enables centralized identity management using SAML/OIDC for Cloud, OIDC for DB Console, and JWT/LDAP for SQL with automated SCIM provisioning.

Can I use SAML and OIDC for CockroachDB Cloud Console authentication?▼

Yes, CockroachDB Cloud Console supports SAML and OIDC protocols for IdP-based authentication. You can configure these SSO connections alongside SCIM 2.0 to automate user lifecycle management between your identity provider and the console.

What protocols are supported for SQL and Cluster SSO in CockroachDB?▼

SQL and Cluster SSO in CockroachDB supports JWT and LDAP protocols for IdP-based authentication. Configuration changes are implemented via cluster settings and HBA rules to map identities correctly.

How do I prevent administrator lockouts when enforcing SSO on CockroachDB?▼

Prevent administrator lockouts during SSO enforcement by using built-in safety checks and rollback procedures. These mechanisms ensure you can revert configuration changes if identity mapping fails or authentication breaks.

Does CockroachDB support SCIM provisioning for self-hosted deployments?▼

SCIM 2.0 provisioning applies to CockroachDB Cloud Console to automate user lifecycles between your IdP and the console. Self-hosted deployments utilize JWT/LDAP for SQL/Cluster SSO without SCIM.

What is the best way to automate user provisioning between my IdP and CockroachDB Cloud Console?▼

Enable SCIM 2.0 provisioning within CockroachDB Cloud Console to automate user lifecycles between your IdP and the console. Configure your IdP connections first, then test login flows end-to-end.

Related Skills

Explore More Legal & Compliance Skills→
DuendeSoftwareDuendeSoftware
10

identityserver-saml

Configure Duende IdentityServer as a SAML 2.0 Identity Provider with SP integration.

Official
Advanced
UnicornUnicorn

data-migration-agent

Plan and execute data migrations across databases with validation and rollback.

Official
Advanced
cockroachdbcockroachdb
3

enforcing-password-policies

Configure password length, bcrypt cost, and login throttling on CockroachDB clusters.

Official
Advanced
delta-and-betadelta-and-beta

architect-access-security

Configure SSO and access controls for Braze with Okta, OneLogin, or Entra.

Community
Advanced