Security questionnaire answers › Access control

Do you support single sign-on (SSO)? How to answer it in a security questionnaire

Why buyers ask this

Enterprise buyers want their own identity provider to control who can reach the product and to disable access centrally.

What a strong answer includes

  • State the supported protocols (SAML 2.0, OIDC) and plans that include it.
  • Mention SCIM provisioning if you have it.
  • Say honestly if SSO is on a roadmap rather than shipped.

Sample answer to adapt

Replace the bracketed parts with your own facts. Only state what is true for your environment.

Yes. We support SSO through [SAML 2.0/OIDC] with [Okta, Entra ID, Google Workspace]. [SCIM provisioning is available/is planned.] SSO is available on [plan].

Evidence to attach

  • SSO documentation
  • Integration guide

Common mistakes

  • Calling it supported when it is only available on request or in beta without saying so.

Answer questionnaires from your own documents

Korrali Trust drafts answers from your policies and evidence so every response traces back to its source, and a person reviews it before it goes out.

Related questions