Docs Teams, privacy and hosting

Team and admin

Run Miosbot for a team: single sign-on with OIDC, user sync with SCIM, signed audit exports, approval policies and spend caps.

Status: rolling out. Team and admin features are built and switch on in an update after launch. Single sign-on and user sync need setup in your identity provider.

Single sign-on (OIDC)

Let your team sign in with your company identity provider over OpenID Connect. You’ll need a client ID and secret from your identity provider.

User sync (SCIM)

Add and remove people automatically with SCIM 2.0 users and groups. Removing a user archives them rather than deleting their history. Each workspace gets its own SCIM token.

Signed audit export

Export the audit log as a hash-chained file signed with Ed25519, so anyone can check that no entry was changed or removed.

Approval policies

Set which actions need approval for each workspace and role.

Spend caps

Set spending caps per person and per workspace, for both money actions and AI usage. The workspace owner is never capped.

Workspace isolation

Each workspace’s data, tokens and audit log are kept separate from every other workspace.