Known limitations
This page lists, transparently, parts of the platform that are still evolving. Review these before depending on a feature for a critical process.
SSO: OIDC is the recommended path for production
SAML appears in the interface as preview — it's available for preparation, but the full SAML authentication flow isn't supported for production use yet. For corporate SSO in production, use OIDC, which is complete.
SCIM configuration in the interface is still evolving
Automatic provisioning via SCIM is implemented and receives syncs from your identity provider. The self-service configuration experience inside the interface is still being expanded — in more elaborate scenarios, customer success support may be needed to complete configuration on the provider side.
Some advanced OIDC scenarios may need extra support
The standard OIDC flow is complete: validation, test flow, email-based discovery, and automatic account creation. For more complex scenarios (non-trivial claim mappings, multiple coexisting providers), it may be useful to talk to our team before going into production.
Webhook event coverage varies by flow
The webhook events list covers the main points in the product. Some more specific events may only fire in certain paths. If you plan critical automation based on a specific event, validate first with a real test.
Where to see the current state
These limitations evolve over time. To follow what has progressed, check the product changelog or talk to your account contact.