SKYE Standard · SIS
SKYE Identity Standard
Global Command Center · Skyes Over London LC
The SKYE Identity Standard (SIS) is the enterprise-grade production gate for SSO + SCIM across every SKYE deployment. It defines what "real SSO" and "real SCIM" mean in the field, how we verify it, and how we ship it consistently across every tenant, every market, every product line.
Enterprise identity is two distinct problems. SIS solves both — with enforcement, not suggestions. Every SKYE deployment that handles enterprise tenants must pass both lanes.
SKYE never becomes the customer's password vault when SSO is enabled. Authentication is owned by the customer IdP and validated correctly via OIDC or SAML. The customer controls authentication. We enforce that this is always true.
Users and groups are provisioned, updated, and deprovisioned automatically. Access ends quickly and deterministically when the IdP says it ends. No manual off-boarding. No lingering access. No exceptions.
"SKYE supports enterprise identity the right way: SSO controls authentication, SCIM controls lifecycle and access, and every change is audited."
A tenant earns the SKYE Production Certified label only when both the AE Compliance Checklist is completed and attached, and the Engineer Preflight Script passes with manual SSO steps verified.
Pre-deployment verification for Account Executives — confirms the deal record has all identity requirements documented and signed off before engineering begins. Must be completed and attached to move to production.
Technical validation checklist for engineers — step-by-step verification of SSO token validation, SCIM endpoint behavior, session revocation, and group sync. Pass output must be attached before go-live sign-off.
Downloadable PDF artifacts for every SIS document — Standard Binder, AE Checklist, and Engineer Preflight — ready to attach to deal records, audit packages, and partner submissions.
Every enterprise tenant follows this path before receiving a SKYE Production Certified status. No shortcuts. No overrides.
The SIS Binder is the complete production specification — not guidelines, not best practices. It defines the exact requirements for SSO and SCIM across SIS-Core and SIS-Enterprise tiers that every SKYE deployment must satisfy before client data is involved.
The AE Compliance Checklist exists because identity misrepresentation is one of the most common causes of enterprise churn. If an AE promises SSO without knowing what SKYE's SSO actually does, everyone loses. The checklist closes that gap before the deal is signed.
Everything enforcement-related for enterprise identity lives here — no Confluence required.
Use the AE Checklist before every enterprise deal closes. Know exactly what you're promising on SSO and SCIM — so engineering isn't surprised after kickoff.
Run the Preflight Script on every enterprise tenant before go-live. Attach the pass output to the deployment record. If it doesn't pass, it doesn't ship.
The SIS Binder and Evidence Pack give auditors and compliance reviewers a standardized, printable record of every identity enforcement decision made during tenant onboarding.
Production-grade enterprise identity enforcement, in your browser, right now. Standard Binder, AE Checklist, Engineer Preflight, and PDF Downloads ready to go.