Identity, Access & Data Control
Who can sign in to Pagination, what each person can reach, and what happens to access and data when people or contracts change.
SSO and SCIM
Sign-in through Microsoft Entra ID, Okta or Google Workspace, with accounts kept in sync with your directory.
Named users
One account per person, with access limited to the projects each person works on.
Your data, your rules
Documents delivered to your own systems, data deleted whenever you decide.
Single Sign-On and SCIM Provisioning
With single sign-on, people sign in to Pagination with their company email and the credentials managed by your IT department. There is no separate Pagination password to create, share or forget.
Single sign-on works with the identity providers most companies already use:
- Microsoft Entra ID (formerly Azure Active Directory)
- Okta
- Google Workspace
Other identity providers can be connected too, with the setup checked directly with your IT department.
- SCIM provisioning: accounts are created, updated and deactivated automatically from your directory, with no users to manage by hand in Pagination.
- Your sign-in policies apply: multi-factor authentication and password rules stay under the control of your IT department.
- Set up with your IT team: the Pagination team agrees the configuration directly with the people who manage your identity provider.
Single sign-on and SCIM are available for enterprise accounts.
When Someone Leaves, Their Access Leaves Too
Shared logins are the weak point of many tools adopted by a single team. A password passed between colleagues is rarely changed: Pagination hardly ever receives a password change request for a shared account. When one of those colleagues moves to another company, nobody can be sure their access has ended.
- With single sign-on and SCIM: when your IT department disables a person in your directory, that person can no longer sign in to Pagination and their account is deactivated automatically.
- Named users instead of shared logins: one account per person, so every sign-in can be traced to someone.
- User packages: multi-user packages cost much less per person than single accounts, so giving everyone their own login does not have to raise the bill.
Access Matched to Each Person’s Work
Not everyone needs to see every project. And in most companies, some accounts stay open long after the people behind them stopped using them.
- Access by project: a user can work only on the catalog, price list or sell sheet project they are responsible for, while others work across all projects.
- Sign-in records: Pagination knows when each user last signed in and which documents they produced, so inactive accounts stand out.
- User reviews: the Pagination team sends you the list of users and their activity, so you can confirm who keeps access and close the accounts nobody uses.
- A clear owner: Pagination can agree a key user and an approver on your side for each project, who know the workflow and decide on new accounts.
Your Data and Documents Stay Under Your Control
Pagination needs your data to build your documents. It does not need to become the archive where those documents are kept.
- Delivery to your systems: finished PDFs and InDesign files pushed through the API to your DAM, PIM or server, so the history stays in your own systems.
- Data from your systems: product data received from your PIM, ERP or DAM through the API, and jobs started from your own systems through webhooks.
- Deletion whenever you decide: data and old documents can be removed at any time, which also keeps storage costs down.
- End of contract: data is kept for 30 days, then you are notified and it is deleted.
Identity & Access at a Glance
A summary for IT and procurement teams reviewing Pagination as a supplier.
- Sign-in
- Single sign-on through Microsoft Entra ID, Okta, Google Workspace or another identity provider (enterprise accounts)
- Sign-in policies
- Multi-factor authentication and password rules managed by your identity provider
- User accounts
- Named users, one account per person
- User lifecycle
- SCIM provisioning and deprovisioning from your directory (enterprise accounts)
- Project access
- Limited to specific projects where needed
- Access review
- Last sign-in and usage records, user list review on request
- Document delivery
- PDFs and InDesign files pushed to your DAM, PIM or server through the API
- Data deletion
- At any time on your side; 30 days after the end of the contract, with notice
- Hosting
- AWS, with European server options in Ireland and Frankfurt, GDPR compliant
- Installation
- None: browser-based, no plugins, InDesign not required
- Renewal notice
- Six weeks before automatic renewal, to the contact you choose
- IT involvement
- Setup questions for your IT team and technical calls on request
Send Your IT Team’s Questions to Pagination
If your IT department has requirements for single sign-on or questions about users and data, send them to Pagination. The Pagination team will set up a call with the people who manage your identity provider.