Organisation setup
Organisation setup is where you turn a fresh tenant into a branded deployment. This is the place to define the organisation name and slug and configure notification email. Organisation-specific self-service SSO federation is not available in the current product version.
What you can configure
- Organisation name and slug - the display name users see and the tenant key used in URLs.
- Branding - logo, colour palette, and other visual tenant settings.
- SMTP - the outbound mail system used for invites, alerts, and approval notifications.
- Sign-in - use the login methods currently offered by VaultPAM. Organisation-specific Microsoft Entra or Okta self-service configuration is not yet available.
Identity provider options
Do not configure an upstream provider in the shared Keycloak realm and do not use Directory Sync credentials for sign-in. The current public login page and its Microsoft, Google, local/password and registration actions remain unchanged. See SSO federation availability for the current supported boundary.
Good practice
Keep the organisation slug stable once users start bookmarking URLs or automation begins to rely on it. Update branding and SMTP as needed, but avoid renaming the tenant unless you are deliberately rebranding.