Enterprise
Invoiced.ai provides easy-to-use SSO and permissioning systems. Sync all of your enterprise users and grant/deny granular access to resources and actions.
Single Sign-On

SAML integration
We provide easy, self-service SAML configuration. Just enter the self-service area from your dashboard and follow the visual instructions. Nearly any SAML provider can be used, including popular options like Okta, Microsoft, and Duo.

Forced SSO
When enabling SSO, users will be required to sign in via SSO so you can ensure strict control over access and security. Note that SSO requires users sign in from either your provider's control panel, your custom Invoiced.ai subdomain, or your custom domain. If users sign in from the main Invoiced.ai website, they will not be able to access your organization.

SCIM provisioning
Using our self-service area, you can also configure SCIM for automatic syncing of users. SCIM will allow your identity provider to notify Invoiced.ai when users are added or removed from the application, ensuring user access properly reflects your provider configuration.
Permissions

Permission profiles
Create profiles that reflect roles within your organization, such as accounts payable buyer, HR admin, etc. Each profile is a self-contained set of permissions that you can assign to any user, immediately granting access to the profile's permissions.

Granular permissions
All modules within Invoiced.ai contain granular permissions so you can control what users can and cannot do. For example, you may want a user to be able to view purchase orders but not create or delete purchase orders. Our permission system lets you do this in just a few clicks.