Members
Admin Center › Users: "Manage your organization's members, their roles and licenses."
Inviting a member
Click Add user.
Enter their Email address.
Choose a role.
Click Send invitation.
The person receives an email. Until they accept, the invitation shows in the list, with Revoke invitation.
Managing a member
Role: change it with the selector. You cannot change your own role.
License:
Assign a license or
Revoke license. Without a license, a member cannot use the organization (see
Licenses).
Disable from organization: blocks access without deleting the account.
Filter the list by role (All roles) or by license (With a license, Without a license).
Members and guests
Roles
Roles apply at two levels: the organization and each environment. They combine the permissions Read, Create, Edit, Delete and Manage access. The base roles are Administrator, Manager, Contributor and Reader (see Sharing and invitations).
Identity providers (SSO)
Admin Center › Identity Providers: your staff sign in to Kubme with their company account (Microsoft Entra ID, Google Workspace, Okta…). Kubme supports OpenID Connect (OIDC) providers. SSO depends on your plan.
Setting up SSO
Company domain: the domain of your email addresses, for example mycompany.com.
Client ID and Client Secret: those of the application you created with your provider.
Configuration method:
Automatic discovery: paste the Issuer or discovery URL, then click Detect;
Manual configuration: Issuer, Authorization URL, Token URL, User Info URL, Logout URL, JWKS URL.
Security options: Validate Signatures and Use PKCE (S256 method, recommended).
Allow the redirect URI: copy the URI shown by Kubme into your provider's application.
Publish the DNS record: add the TXT record shown to your domain's DNS zone, then click Verify.
Until the domain is verified, the provider stays disabled.
SSO becomes mandatory
Once the domain is verified, SSO is enforced for users of that domain: they sign in with your company's button, and their password and two-factor authentication are managed by your provider.