Overview of IdP Group Sync
IdP Group Sync allows workspace administrators to map groups from an identity provider (IdP) to specific access levels within Plane. When a user signs in via SSO, Plane reads their group memberships and automatically grants the corresponding access. This ensures that onboarding and offboarding are handled automatically as group memberships change in the IdP.
Availability: Group syncing is currently available only on self-hosted Commercial and Airgapped Editions.
Supported Providers:
- OIDC: Supports sync on login and scheduled offline sync.
- LDAP: Supports sync on login and scheduled offline sync.
- SAML: Supports sync on login only (groups are only present in the login assertion).