Administration

Contentstack Administration is composed of four core elements that help manage users, permissions, and identity securely and efficiently:

1. Organization : An Organization is the top-level entity in a Contentstack hierarchy that allows you to manage users and stacks from one place. Users, stacks—and consequently, the resources within the stacks—are part of an Organization. As a result, an Organization lets you manage users and stacks from one administrative panel.
2. Teams: Teams makes it easier to manage roles and permissions by organizing users into groups. Instead of assigning roles individually or at the stack level, you can assign roles directly to a team. This ensures that all users within a team share the same set of role permissions.
3. Single Sign-On (SSO): Contentstack supports Single Sign-On (SSO). If your Contentstack organization is SSO-enabled, users can access the organization through your corporate identity provider credentials, instead of Contentstack account credentials. This eliminates the normal login process and enables faster and secure access to your apps.
4. SCIM (System for Cross-domain Identity Management): SCIM (System for Cross-domain Identity Management) is a secure protocol that enables automatic user provisioning. It eases the process of managing user identity data between an identity provider (such as OneLogin) and service providers (such as Contentstack).

Organization

The Organization feature is primarily for administrators (Owner and Admins), allowing them to manage roles and permissions for the users and stacks of the account.

Organization’s two main purposes:

1. simplify the process of managing stacks and permissions for a group users or company.< p>

2. View consolidated subscription plan and usage information.

Teams

Teamsis an Organization-wide feature that can be accessed through Organization Settings. Teams let you assign both Organization-level and stack-level roles to the users. Once a team is set up, members can be added and assigned roles. Roles assigned to a team will also reflect under the Users & Rolesmodule.

Users can be invited to the team, and if they are new to Contentstack, they will receive a link to set up an account. A user can be part of multiple teams and can inherit roles from all those teams. For example, if a user is part of two teams with different roles for the same stack, they will inherit both roles.

Watch the webinar to learn more about the Teams & Taxonomy features.

Single Sign-On (SSO)

• SSO Method: Single Sign-On is a method that enables a particular system (usually the concerned organization’s identity provider) to authenticate users and subsequently inform Contentstack that the users have been authenticated. The users are then allowed to access their resources in Contentstack without having to sign in using Contentstack credentials.
• SSO Standard: Contentstack uses the most commonly adopted SSO standard, i.e., Security Assertion Markup Language 2.0 (SAML 2.0). Consequently, our SSO implementation can be integrated with any well-known identity provider (IdP) that supports SAML 2.0. You can refer to our SSO Guides section to learn how you can integrate SSO with any IdP
• SSO Settings: To access the SSO settings, log in to your Contentstack account, go to the Organization Settings page, and then click on the SINGLE SIGN-ON tab.