Your team already knows
how to sign in.
DecisionBox plugs into the identity provider your company already uses — Okta, Google Workspace, Entra ID, or any major OIDC provider. No new passwords, no user migration, no IT tickets to raise.
Three outcomes your IT lead cares about
Zero new passwords
Your team signs in with the credentials they already use every day. Nothing new to remember, nothing new for IT to support.
Auto-provisioning, auto-offboarding
New employees get the right access the moment they land in your IdP. When they leave, access disappears automatically — no manual cleanup, no stale accounts.
Compliance-ready from day one
Centralized access control and audit attribution satisfy SOC 2, HIPAA, and GDPR requirements out of the box. Your security team has probably already approved it.
From your IdP to the right access, automatically
Configured once by your admin. Every sign-in after that resolves to the right role, team, and organization — automatically.
Sign in to DecisionBox
Redirects to acme.okta.com
One button, one click — branded to your workspace, powered by whichever identity provider your company uses.
Every major identity provider
Built for the way your org already runs
Any identity provider
Auth0, Okta, Entra ID, Google Workspace, Keycloak, Cognito, or any OIDC-compliant IdP. Drop in the issuer URL and it just works.
Role-based access control
Viewer, member, and admin roles enforced per-endpoint. No secondary permission store to maintain, no second place to grant access.
Multi-tenant isolation
Each organization only ever sees its own projects, insights, and discovery runs. Enforced at the query layer, not the UI.
Team-based role syncing
Map your IdP groups to DecisionBox roles. When someone moves teams, their access follows automatically — no manual updates.
Already approved in your security stack.
Standard OIDC, standard JWT validation against your IdP's JWKS endpoint, standard role enforcement per route. Every query is scoped by organization at the data layer. If your security team has approved your IdP, they've approved DecisionBox Enterprise.