Start free trial
Start free trial
SAML, SCIM provisioning, and granting roles per location so somebody who works Saturdays at one branch does not get all four.

Available on the group plan, for shops with more than one location.

Single sign-on

Settings → Security → SSO supports SAML 2.0. Benchtop gives you an ACS URL and an entity ID; your identity provider gives you a metadata URL. Most setups take about ten minutes.

Once it is on, staff sign in through your provider and Benchtop stops holding passwords for your team at all.

Provisioning

SCIM 2.0 keeps the two in step: somebody added to the right group in your directory appears in Benchtop, and somebody removed loses access without anybody remembering to do it. This is the part that actually matters — the most common access problem in a multi-branch group is a leaver nobody revoked.

Roles per location

A role is granted at a location, not across the group. Somebody can be a manager at one branch and a counter at another. Group-level reporting is its own permission and is off by default.