February 2024 Summaries

Infisical, an open-source secret management platform, supports SAML Single Sign-On (SSO) and SCIM provisioning as part of its enterprise package to streamline user management through external identity providers like Okta or Azure. With SAML SSO, organizations can enforce a single authentication point for their users, while SCIM provisioning automates user provisioning and de-provisioning. This feature enables better security and streamlined user management, making it an attractive option for teams looking to bolster their organization's security. By leveraging Infisical with SAML SSO, teams can simplify their identity and access control management.

Infisical has introduced a new machine authentication method called "Identities" which improves upon the existing Service Token and API Key authentication methods by providing a more secure and granular access control system for machines to manage secrets in Infisical. Identities offer a revised user experience with Universal Authentication (UA), role-based permission systems, and robust security configuration options such as token-bound IP allowlisting. To get started with identities, users can create an identity, generate a client secret, add it to a project, and use it to access the API through a login operation that exchanges the client ID and client secret for an access token. This new authentication method aims to streamline secret management workflows and provide better security for teams and organizations using Infisical.