Enterprise Security: SSO, SAML, and SCIM in Minoa
Minoa now supports SAML SSO, SCIM user provisioning, and MFA — meeting the security and compliance requirements of enterprise value selling organizations.
Your value selling platform holds some of the most sensitive data in your sales org.
Business case projections. Deal economics. Customer-specific financial assumptions. Competitive pricing models. Outcome benchmarks tied to named accounts. This is the kind of data that procurement and infosec teams scrutinize before approving any new vendor — and rightfully so.
Yet many value selling tools treat security as an afterthought. Basic username-and-password authentication. Manual user management. No centralized access controls. For a team of five, that's manageable. For a 200-person sales org at an enterprise company with strict IT governance, it's a non-starter.
We've heard this from dozens of prospects and customers over the past year. The conversation always follows the same arc: the Value Engineering team loves Minoa, the AEs are excited, and then the security review starts. Procurement sends the vendor questionnaire. IT asks about identity management. The CISO wants to know about access provisioning and deprovisioning.
Today, we're closing that gap. Minoa now supports SAML-based SSO, SCIM user provisioning, and multi-factor authentication — the enterprise security trifecta that IT and procurement teams expect.
SAML SSO: One Login, Zero Friction
SAML-based Single Sign-On means your team authenticates through your existing identity provider. We have a native Okta integration with both SAML and OIDC support, and any SAML 2.0 compliant provider can be configured. No separate Minoa passwords to manage. No additional credentials to forget or compromise.
What this means in practice:
- For sellers: Click your company's SSO tile and you're in. No password resets, no separate login flows, no friction between opening your CRM and opening Minoa.
- For IT admins: Minoa authentication is governed by your existing identity policies. Session duration, password complexity, conditional access rules — whatever you've configured in your IdP applies to Minoa automatically.
- For security teams: Authentication is centralized. When an employee leaves the company and their IdP account is deactivated, Minoa access is revoked immediately. No orphaned accounts, no lingering access to sensitive deal data.
SAML SSO also enables seamless onboarding. When a new AE joins the team, they access Minoa through the same SSO portal they use for every other tool. No IT ticket. No waiting for an admin to create an account manually.
SCIM Provisioning: Automate User Lifecycle Management
SSO handles authentication — proving you are who you say you are. SCIM handles provisioning — ensuring the right people have the right access at the right time, automatically.
SCIM (System for Cross-domain Identity Management) connects Minoa to your identity provider so user accounts are created, updated, and deactivated in sync with your directory.
Here's what the provisioning workflow looks like:
When a new team member joins:
- IT adds them to the appropriate group in your IdP
- SCIM automatically creates their Minoa account and assigns them to the correct team
- The user logs in via SSO on their first day — no manual setup required
When a team member changes roles:
- IT updates their group membership in the IdP
- SCIM syncs the change to Minoa — moving them to the appropriate team
When a team member leaves:
- IT deactivates their IdP account
- SCIM automatically deactivates their Minoa account — immediately revoking access to all business cases, value frameworks, and deal data
Why this matters: In a 200-person sales org with normal attrition and hiring, manual user management is a constant drain on admin time. More critically, delayed deprovisioning is a security risk. Every day a departed employee retains access to business case data is a day that sensitive financial projections and customer assumptions are exposed.
SCIM eliminates both problems. Provisioning is instant. Deprovisioning is automatic. The admin burden drops to near zero.
Multi-Factor Authentication: Defense in Depth
For organizations that want an additional layer of security beyond SSO, Minoa now supports multi-factor authentication (MFA).
Admins can require MFA for all users or for specific roles. Minoa supports TOTP-based authenticator apps (Google Authenticator, Authy, 1Password).
MFA is especially valuable for accounts with elevated permissions — admins who manage value frameworks, users who configure data export destinations, or anyone with access to organization-wide analytics.
Admin Controls and Audit Visibility
Enterprise security isn't just about authentication. It's about visibility and governance.
Minoa's security settings give admins centralized control over:
- Authentication policies — enforce SSO-only access, require MFA for specific roles
- Provisioning configuration — connect your SCIM endpoint, map IdP groups to Minoa teams, monitor sync status
- SCIM audit logs — track provisioning and deprovisioning events with before/after state, so you have a record of every user lifecycle change
SCIM audit logs are particularly important for organizations in regulated industries. When compliance requires evidence of access controls and user lifecycle governance, these logs provide the paper trail.
Why This Matters for Value Selling Teams
Value selling platforms aren't just sales tools. They're repositories of institutional knowledge — your value frameworks, your ROI benchmarks, your competitive positioning, your customer-validated assumptions. This data represents years of value engineering expertise distilled into reusable models.
Protecting that data isn't optional. It's a requirement for any organization that takes its intellectual property and customer relationships seriously.
Enterprise security also unlocks broader adoption. We've seen it repeatedly: a Value Engineering team of five adopts Minoa successfully, but rolling it out to the wider sales org stalls because IT can't approve a tool without SSO and SCIM. Removing that blocker means value selling can scale from a team initiative to an organizational capability.
And for teams already using Minoa's multi-language and multi-currency capabilities across global offices, centralized identity management becomes even more critical. A sales team spanning Tokyo, London, and New York needs consistent access controls regardless of geography.
Getting Started
SAML SSO, SCIM provisioning, and MFA are available now for Minoa Enterprise customers.
To configure SSO and SCIM:
- Navigate to your Team settings
- Configure your identity provider (native Okta integration available, or any SAML 2.0 provider)
- Follow the guided setup to exchange metadata and configure attribute mapping
- Enable SCIM and connect your provisioning endpoint
- Test with a pilot group before rolling out to the full org
To enable MFA:
- Navigate to your Team settings
- Toggle MFA requirements for your users
- Users will be prompted to set up their authenticator on next login
Our team is available for assisted setup on Enterprise plans. Book a session and we'll walk through the configuration with your IT team.
What's Next
Enterprise security is a foundation, not a finish line. We're continuing to invest in governance capabilities that enterprise teams need, including role-based access controls with custom permission sets, IP allowlisting, and SOC 2 Type II certification.
These features are part of our broader commitment to making Minoa enterprise-ready across every dimension — security, scalability, and global reach.
Ready to get started? Book a demo to see Minoa in action.