SAML single sign-on and SCIM, AI governance, and HR records under retention and legal hold
SAML 2.0 connections with signed and, if required, encrypted assertions and a per-connection choice of MFA after the directory; SCIM tokens shown once; the Security administrator; AI switched off, suggest-only or allowed per area with reviews a person decides; and HR records retained, held and exported as one sealed bundle.
What a security or records officer answers for, set on Platform. How to reuse: values in angle brackets are examples; put your own in their place.