Passbolt (self-hosted) supports SCIM provisioning, but it is gated behind higher-tier enterprise plans. Stepwork automates Passbolt (self-hosted) provisioning with 98% accuracy — no API required.
SCIM is gated behind Enterprise Plan Complexity Vector: Secrets management is key-based and shared vault driven. Offboarding must rotate secrets and revoke keys—APIs rarely cover full rotation workflows; UI + human verification is required.
Credential access is highly sensitive, yet self-hosted Passbolt setups often lack consolidated audit evidence. This complicates custody verification, which is why teams use Stepwork to automate Passbolt (self-hosted) flows with 98% accuracy without needing an API.
Passbolt (self-hosted) supports SAML sign-on. Stepwork authenticates through your existing identity provider — the same way your employees do.
Passbolt (self-hosted) supports SCIM provisioning, but it is gated behind higher-tier enterprise plans. Many teams don't need a full enterprise upgrade just for provisioning — Stepwork provides SCIM-like automation on any plan.
Stepwork automates Passbolt (self-hosted) provisioning through interface automation — the same way a human would, but with 98% accuracy and no API required. Record the flow once, and Stepwork runs it on demand or on a schedule.
Yes. Stepwork authenticates to Passbolt (self-hosted) through your existing identity provider (Okta, Microsoft Entra ID, 1Password, etc.) and completes MFA natively — including OTP, passkeys, and push notifications. No separate credentials or service accounts are needed.
See how Stepwork provisions users in Passbolt (self-hosted) with 98% accuracy — in a 15-minute demo.
Book a DemoThe primary risk is manual work. Additional risks include leaving credentials accessible after offboarding, creating severe security exposure. Stepwork eliminates these risks by automating the entire provisioning workflow.
No. Stepwork completes MFA exactly like a human user — supporting OTP, passkeys, push notifications, and other methods. It signs in through your existing identity provider via SAML, mirroring your organization's security posture.