Manage Agent Gateway users and access
Add people to Agent Gateway, sign them in with SSO and SCIM, group them, and choose which connections and tools each group can use.
Agent Gateway decides what each person’s AI client can do in two steps: who can sign in, and which tools each group can use on each connection. You manage both in the dashboard, under Identity, Groups and each connection’s Policies tab.
Add users
Section titled “Add users”Only Gateway users can sign in to the Gateway. You become one when you enable it. To add someone else:
- In Agent Gateway, open Identity, then the Users tab.
- Select Create User and enter their email address.
They get access straight away, with no invitation email. They can then connect their AI client.
Sign users in with your identity provider
Section titled “Sign users in with your identity provider”To manage users from your company’s identity provider, such as Okta or Microsoft Entra ID, use the other two tabs in Identity:
- SSO: users sign in to the Gateway through your identity provider.
- SCIM: your identity provider syncs its users and groups to the Gateway. Synced groups appear under Groups.
Group users and choose their tools
Section titled “Group users and choose their tools”Groups decide which connections and tools a person can use. Every user is in the built-in Everyone group. You can add manual groups, and groups synced from your identity provider through SCIM appear there too. On each connection’s Policies tab, you grant groups all tools, only the tools you allow or all tools except the ones you block.
Access policies walks through creating groups and grants with screenshots, explains how grants combine and has recipes for common setups.
Create groups and choose which tools each one can use in Access policies.