How can I set up IdP-based Auto Provisioning?

Last updated: October 18, 2026

If your identity provider (Google Workspace, Microsoft Entra ID or Okta) already gives people access to an app based on their groups, Cakewalk can record that access instead of creating tasks for it.

  1. Make sure your user groups are synced. If they are not, the Identity provider card on the app shows Sync user groups.

  2. Go to App governance, open the app and click Provisioning.

  3. Click Configure on the Identity provider card.

  4. Choose the permission level your identity provider grants, and save.

  5. Add the app as a default app to the synced group that gets access in your identity provider.

When people join or leave that group in your identity provider, Cakewalk marks their access as provisioned or removed.

An app can use either Agent Cake or your identity provider for provisioning, not both. To switch, delete the Agent Cake configuration first.

Learn more: IdP-Based Auto-Provisioning