Agent OS · Component · enterprise-workspace-identity
Tenant identity, enterprise SSO, provisioning and access control
What it does
Manage workspace membership, invitations, role/policy access, enterprise OIDC/SAML login and SCIM user/group provisioning.
Core pattern
Organization membership sync + scoped role access
- Input
- User identity, provisioning requests and membership policies
- Output
- Sessions, memberships and authorized workspace access
Key parameters
| Name | Type | Default | Values |
|---|---|---|---|
| operation | string | members_read | members_read · invite · provision_user · provision_group · set_roles · check_access · sso_start · sso_callback · revoke_session |
| scope | object | — | — |
| roles | array | [] | — |
| session_policy | — | — | — |
| policy | — | — | — |
Maturity and limits
Enterprise auth/security and workspace quota/access tests with concrete SSO/SCIM modules. Phase 2: source paths and implementation inspected statically; tests and external integrations were not executed. Maturity rates repository implementation, not a verified production deployment.
No root reuse license found; third-party component notices apply. Workspace data, provider credentials and local-runtime access require tenant isolation; live services were not exercised.
1 sentence citing source paths or vendor names omitted for publication.
Used in pipelines
Industry tags
- Retail & ecommerceSource-supported industry
For work involving products, customers and fulfillment, use organization membership sync followed by scoped role access.
- HealthcareTransferable use
For hospital appointment and administrative service desks, use organization membership sync followed by scoped role access.
Skills pack
Contract scaffold and deterministic mock
Download · 13KBSHA-256 04a67530b53f4ce3de1e5f6cee9884cf4ad2dea44351f49504298beec4520eb6
Related components
-
Local coding-agent execution governance
Pre-action policy decisions + human permission and audit
Working 1 pipeline -
Collaborative delivery, approvals and evidence gates
Draft and artifact versioning + human handoff approval
Working 4 pipelines -
Retrieval ranking and authorization-boundary evaluation
Relevant and forbidden sample tests + retrieval boundary reports
Working not yet in a pipeline -
Customer sessions, registration and verification
Account verification + session and access management
Working 1 pipeline