Abnormal Security Portal does not currently offer SCIM-based user provisioning. Stepwork automates Abnormal Security Portal provisioning with 98% accuracy — no API required.
No SCIM Support Complexity Vector: Automation fails because security tools prioritize controlled, auditable actions (investigations, quarantine/release, policy changes) and often keep high-impact operations behind UI + approvals, making “hands-off” automation risky and incomplete.
In email security environments like Abnormal Security, AI agents need orchestration to investigate alerts, manage user remediation, and coordinate response actions without disrupting live security operations. Stepwork applies strict, policy-based guardrails around those agent actions, ensuring automation can assist at speed while staying within approved response scopes and escalation paths which is why teams use Stepwork to automate Abnormal Security Portal flows with 98% accuracy without needing an API.
Abnormal Security Portal supports SAML sign-on. Stepwork authenticates through your existing identity provider — the same way your employees do.
No. Abnormal Security Portal does not currently offer SCIM-based user provisioning, leaving IT teams to manage user lifecycle changes manually.
Stepwork automates Abnormal Security Portal provisioning through interface automation — the same way a human would, but with 98% accuracy and no API required. Record the flow once, and Stepwork runs it on demand or on a schedule.
Yes. Stepwork authenticates to Abnormal Security Portal through your existing identity provider (Okta, Microsoft Entra ID, 1Password, etc.) and completes MFA natively — including OTP, passkeys, and push notifications. No separate credentials or service accounts are needed.
See how Stepwork provisions users in Abnormal Security Portal with 98% accuracy — in a 15-minute demo.
Book a DemoThe primary risk is email threats are automated, but analyst provisioning isn’t. Additional risks include creating security access risk, lingering high-privilege access, operational friction for security teams. Stepwork eliminates these risks by automating the entire provisioning workflow.
No. Stepwork completes MFA exactly like a human user — supporting OTP, passkeys, push notifications, and other methods. It signs in through your existing identity provider via SAML, mirroring your organization's security posture.