---
title: "Workspace Security Settings"
description: "The Workspace Security Settings page allows administrators and team members with appropriate permissions to manage advanced authentication, risk monitoring, and compliance for their workspace. This..."
last_updated: "2026-10-12T07:02:39.296911+00:00"
canonical_url: "https://www.doc0.dev/docs/934e554a-e6a1-476f-bb2f-23e62d86c3fd/guide/configuration/workspace-security-settings"
---

## Overview

The Workspace Security Settings page allows administrators and team members with appropriate permissions to manage advanced authentication, risk monitoring, and compliance for their workspace. This includes setting up Single Sign-On (SSO) via SAML, configuring identity provider directory sync using SCIM, managing fraud prevention rules to protect partner programs, and exporting security audit logs.

> [!NOTE]
> Most security features, such as SAML Single Sign-On, SCIM Directory Sync, and audit log exports, are exclusively available on the **Enterprise Plan**. Fraud rules require an **Advanced** or **Enterprise Plan**.

---

## Configuring SAML Single Sign-On (SSO)

### SAML Overview

SAML Single Sign-On allows your team members to sign in to your workspace using your corporate identity provider. 

### How to Configure SAML SSO

1. Navigate to your workspace **Settings** and select **Security**.
2. Under the **SAML Single Sign-On** section, click **Configure**.
3. Choose your identity provider from the dropdown menu.
4. Provide the required connection details:
   - For most providers, paste the URL to your identity provider's metadata (`metadataUrl`).
   - For Google, upload your metadata XML file (`encodedRawMetadata`).
5. Click **Save changes** to complete the configuration.

> [!IMPORTANT]
> You must be logged into your workspace using your organization’s work email address to configure SAML SSO. Generic email domains cannot be used for SAML configuration.

---

## Managing Fraud Prevention Rules

### Risk Rules Overview

Workspace administrators can set up and customize risk rules to detect and prevent fraudulent activity within partner programs. 

### Configuring Risk Rules

1. Open your workspace risk management or program settings and open the **Risk rules** configuration sheet.
2. Review the available risk rules and toggle them on or off as needed.
3. For rules that support advanced settings, customize parameters such as whitelisted campaign IDs or banned domains.
4. Click **Save** to apply your changes.

> [!WARNING]
> Disabling certain risk rules may trigger automatic resolution of pending fraud events and release held commissions. A confirmation prompt will appear if any active rules are being turned off.

---

## Viewing and Exporting Audit Logs

### Audit Log Overview

Audit logs maintain a history of workspace events, partner activities, and payout records for compliance and security reviews.

### Exporting Audit Logs

1. Go to your workspace **Security** settings page and locate the **Audit Logs** section.
2. Select your desired date range using the date picker.
3. Click **Export CSV** to download your audit log report.

---

## Key Concepts

* **Single Sign-On (SSO):** An authentication method that allows users to securely log in to multiple applications using a single set of credentials provided by an identity provider.
* **SCIM Directory Sync:** An automated protocol used to provision and deprovision users from your identity provider directly into your workspace.
* **Audit Logs:** A chronological record of security-related events and workspace activity used for compliance tracking.
* **Fraud Prevention Rules:** Automated checks designed to detect suspicious referral traffic, duplicate accounts, and fraudulent customer email matches.

## Related

- [Account and Workspaces](https://www.doc0.dev/docs/934e554a-e6a1-476f-bb2f-23e62d86c3fd/guide/getting-started/account-and-workspaces)
- [Troubleshooting and FAQ](https://www.doc0.dev/docs/934e554a-e6a1-476f-bb2f-23e62d86c3fd/guide/troubleshooting/troubleshooting-and-faq)


## Sitemap

See the full [sitemap](https://www.doc0.dev/docs/934e554a-e6a1-476f-bb2f-23e62d86c3fd/llms.txt) for all pages in this wiki.