Identity integration

This page covers initial identity setup for Terraform Enterprise. Ongoing team, role, and SAML management belongs in the Administration Guide.

SSO and teams

The setup of SSO for HCP Terraform is not covered in detail in this document, as configurations can vary depending on the SAML 2.0-compliant provider used.

• You can find specific instructions for popular identity providers here(opens in new tab).
• For applicable SAML 2.0 documentation, here(opens in new tab).

We recommend automating the creation of teams alongside projects, Stacks, and workspaces using the Terraform Enterprise provider. After creating the initial teams required, automate the addition of users within your strategic IdP platform. By adding a team attribute name (default: MemberOf) attribute within your IdP, you can automatically assign users to the created groups in the SAML configuration. You can find further details here(opens in new tab).

Note: For user accounts used by pipelines, use IsServiceAccount set to true to flag these in SAML. See isserviceaccount(opens in new tab). Create teams in Terraform Enterprise with the exact name of the group in the IdP. Do not create users manually - Terraform Enterprise creates these automatically after it processes the SAML assertion at login.