> ## Documentation Index
> Fetch the complete documentation index at: https://hercules.app/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Identity & Access Management

> Control access to Hercules and the apps you build with SAML SSO, roles, permissions, audit logs, and enterprise SCIM provisioning for your organization.

Hercules Identity and Access Management allows you to control who can access features inside the Hercules platform and in the apps that you build.

<div className="screenshot purple">
  <img src="https://mintcdn.com/zeus-0f6dadbf/K8_RCaEW__ZwN5hW/images/org/saml-sso.png?fit=max&auto=format&n=K8_RCaEW__ZwN5hW&q=85&s=7490717bc3a722e32f542b62e2070bff" alt="Single sign-on configuration for a Hercules organization" width="2466" height="1010" data-path="images/org/saml-sso.png" />
</div>

### How do I manage access to the Hercules platform?

Enterprise organizations can use:

* **SAML SSO:** Sign in through your identity provider. See [SSO / SAML](/docs/platform/sso-saml).
* **Roles and permissions:** Control what teammates can do. See [Teammates](/docs/platform/teammates).
* **Audit logs:** Review platform activity.
* **SCIM provisioning:** Provision and remove teammates through your identity provider, available through an enterprise arrangement.

Contact [sales@hercules.app](mailto:sales@hercules.app) to discuss provisioning and audit-log requirements.

### Can users sign in to my apps with SAML SSO?

Yes. See [Single Sign-On](/docs/apps/users-auth/single-sign-on).

### How do I control permissions inside my app?

1. Use [sign-in rules](/docs/apps/users-auth/sign-in-rules) to control who can access your app.
2. Ask Hercules to implement [role-based access control](/docs/apps/users-auth/users-roles-permissions).

### Can I audit sign-ins to my app?

Yes. See [Audit Log](/docs/apps/users-auth/audit-log).

### Additional FAQ

<AccordionGroup>
  <Accordion title="Are platform roles and app roles the same?">
    No. Platform roles control access to Hercules. App roles control access inside the app you
    build. Configure each for its own users and responsibilities.
  </Accordion>

  <Accordion title="Do I need Enterprise for SSO?">
    SSO is also available on Business plans. See the [platform SSO](/docs/platform/sso-saml) and [app
    SSO](/docs/apps/users-auth/single-sign-on) guides for setup and availability.
  </Accordion>
</AccordionGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.