Overview
The Workspace Security Settings page allows administrators and team members with appropriate permissions to manage advanced authentication, risk monitoring, and compliance for their workspace. This includes setting up Single Sign-On (SSO) via SAML, configuring identity provider directory sync using SCIM, managing fraud prevention rules to protect partner programs, and exporting security audit logs.
Note
Most security features, such as SAML Single Sign-On, SCIM Directory Sync, and audit log exports, are exclusively available on the Enterprise Plan. Fraud rules require an Advanced or Enterprise Plan.
Configuring SAML Single Sign-On (SSO)
SAML Overview
SAML Single Sign-On allows your team members to sign in to your workspace using your corporate identity provider.
How to Configure SAML SSO
- Navigate to your workspace Settings and select Security.
- Under the SAML Single Sign-On section, click Configure.
- Choose your identity provider from the dropdown menu.
- Provide the required connection details:
- For most providers, paste the URL to your identity provider's metadata (
metadataUrl). - For Google, upload your metadata XML file (
encodedRawMetadata).
- For most providers, paste the URL to your identity provider's metadata (
- Click Save changes to complete the configuration.
Important
You must be logged into your workspace using your organization’s work email address to configure SAML SSO. Generic email domains cannot be used for SAML configuration.
Managing Fraud Prevention Rules
Risk Rules Overview
Workspace administrators can set up and customize risk rules to detect and prevent fraudulent activity within partner programs.
Configuring Risk Rules
- Open your workspace risk management or program settings and open the Risk rules configuration sheet.
- Review the available risk rules and toggle them on or off as needed.
- For rules that support advanced settings, customize parameters such as whitelisted campaign IDs or banned domains.
- Click Save to apply your changes.
Warning
Disabling certain risk rules may trigger automatic resolution of pending fraud events and release held commissions. A confirmation prompt will appear if any active rules are being turned off.
Viewing and Exporting Audit Logs
Audit Log Overview
Audit logs maintain a history of workspace events, partner activities, and payout records for compliance and security reviews.
Exporting Audit Logs
- Go to your workspace Security settings page and locate the Audit Logs section.
- Select your desired date range using the date picker.
- Click Export CSV to download your audit log report.
Key Concepts
- Single Sign-On (SSO): An authentication method that allows users to securely log in to multiple applications using a single set of credentials provided by an identity provider.
- SCIM Directory Sync: An automated protocol used to provision and deprovision users from your identity provider directly into your workspace.
- Audit Logs: A chronological record of security-related events and workspace activity used for compliance tracking.
- Fraud Prevention Rules: Automated checks designed to detect suspicious referral traffic, duplicate accounts, and fraudulent customer email matches.