SCIM provisioning that actually works
Okta, Azure AD, Google Workspace — provision users into Pact roles automatically. When IT removes someone from the IdP group, their Pact access disappears in the same sync cycle.
For IT, ops, and admins
Provision, audit, revoke — without a ticket queue.
SCIM provisioning, custom RBAC, SSO/SAML, BYOK encryption, and an immutable audit log. Every change a user makes — and every change you make to a user — is queryable and exportable.
Illustrative outcomes — composite of design-partner deployments
↓ 4 days
audit evidence gathering time
↓ 0
shadow accounts after IdP deprovisioning
↑ 12pts
MFA adoption (passkeys + SSO defaults)
↓ 78%
permission-change tickets to the help desk
What you get on day one
Six things you stop juggling.
Custom roles, sane defaults
RBAC has 12+ built-in roles for the common shapes (SDR, AE, CSM, Marketing Ops, Auditor) and a UI to compose new ones from primitives. No YAML, no engineering ticket.
Audit log, immutable + exportable
Every mutation produces an event with actor, IP, before/after, and a correlation id. Exportable in NDJSON for SIEM ingestion; retention is configurable per tenant. New: SOC 2 Type II evidence collection runs automatically against this log, and a self-serve HIPAA BAA is signable in-product.
BYOK + key rotation, your timeline
Bring your own data-encryption keys via KMS. Rotate without downtime; the system re-wraps data keys in the background. Key lineage is visible in the admin UI.
Session control, in real time
List every active session per user. Revoke individually or in bulk. Force a re-auth across the org from one screen — useful the day after the breach you weren't expecting.
Webhooks + API keys, by scope
Scoped API keys (read-only, segment-write, audit-only). Webhook subscriptions with HMAC signing and a delivery dashboard so you can debug your downstream consumer in-product.
“When the auditor asked for evidence of access reviews, I exported the audit log to NDJSON and emailed it. Forty minutes from question to answer. That used to be a four-day project.”
IT Director · Regulated B2B fintech · illustrative scenario
For other roles
Pact for SalesPact for Customer successPact for MarketingPact for Data teamsPact for Finance leadersPact for FoundersPact for Enterprise
Try Pact free. Upgrade when it pays for itself.
The Free plan stays free as long as you're under the limits. Pro and Team open with a 14-day trial — full features, no card.
Last reviewed: 2026-06-15
American English · claims grounded against shipped functionality
Closes DP-014 + DP-015