BoxyHQ (Enterprise SSO) Connector for AI agents.
8 live capabilities
Manage SAML and OIDC connections and SCIM user provisioning.
Waiting for input…
Why people use BoxyHQ (Enterprise SSO)
BoxyHQ (Enterprise SSO) for Automating SAML and OIDC Workflows
With this Connector, you just tell your AI agent to set up a new connection for Tenant X. The agent handles the metadata, creates the directory, and gives you the base URL in seconds. You get to stop being a copy-paste monkey and start being an engineer who actually solves problems.
What Vinkius changes
You get a natural language interface for your enterprise identity management.
Use it from Claude, ChatGPT, Cursor or another AI client you already have.
One account · 5,900+ Connectors
- Real-world use case 01
Onboarding a new client
A DevOps lead asks the agent to create a new SAML connection for a specific app and then set up a SCIM directory for user syncing.
- Real-world use case 02
Security Audit
A security engineer asks the agent to list all SSO connections and find any that are missing updated metadata.
- Real-world use case 03
Troubleshooting
A product manager asks the agent to check the health of the BoxyHQ service and list all users in a specific directory to see if a sync failed.
Complete set · 8capabilities
The complete BoxyHQ (Enterprise SSO) capability set.
These are the exact actions your AI can choose when you ask it to work with BoxyHQ (Enterprise SSO).
01—04
4 capabilities in this set.
Part of 8 available through BoxyHQ (Enterprise SSO).
- 01 Capability
Get directory groups
Lists every group within a specific tenant or product directory. This helps you see exactly who has access to what.
- 02 Capability
Get connections
Fetches a list of all SSO connections currently active. It's great for auditing your entire setup in one go.
- 03 Capability
Health check
Verifies that the BoxyHQ service is running correctly. It's the quickest way to see if your connection to the platform is active.
- 04 Capability
Create directory
Sets up a new SCIM 2.0 directory for automated user syncing. This is the primary capability for onboarding new enterprise customers.
05—08
4 capabilities in this set.
Part of 8 available through BoxyHQ (Enterprise SSO).
- 05 Capability
Delete connection
Removes an SSO connection from your environment. Use it to clean up old connections and maintain a tight security posture.
- 06 Capability
Get directory users
Pulls a list of all users assigned to a directory. Use this to verify that user syncing is working correctly.
- 07 Capability
Update connection
Modifies the settings of an existing SSO connection. Use this to change metadata or update security configurations on the fly.
- 08 Capability
Add connection
Creates a new SAML or OIDC connection for a product. You can provide a metadata URL or raw XML to get it running fast.
Set up in minutes
One URL. Then ask BoxyHQ (Enterprise SSO) to work.
Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use BoxyHQ (Enterprise SSO) from the conversation.
Choose your client
Live previewAdvanced clients IDE · CLI
Claude · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_mklve50aPp8ZWYnoHIPytmbMOI56yquxuMIE9WQ1/mcp - Step 01
Open Connectors
In Claude Web or Claude Desktop, open Settings and choose Connectors.
- Step 02
Add the URL
Choose Add custom connector, name it BoxyHQ (Enterprise SSO), and paste the URL above.
- Step 03
Turn it on in chat
Select +, open Connectors, and enable BoxyHQ (Enterprise SSO) for the conversation.
ChatGPT · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_mklve50aPp8ZWYnoHIPytmbMOI56yquxuMIE9WQ1/mcp - Step 01
Open MCP settings
On desktop, open Settings and MCP servers. On web, open your workspace app or connector settings.
- Step 02
Add the URL
Choose Add server with Streamable HTTP, or create a custom MCP app, then paste the BoxyHQ (Enterprise SSO) URL.
- Step 03
Save and start
Save the connection and enable BoxyHQ (Enterprise SSO) in your conversation. Desktop may ask you to restart once.
Cursor · IDE configuration
Advanced setup
{
"mcpServers": {
"boxyhq-enterprise-sso": {
"url": "https://edge.vinkius.com/vk_preview_mklve50aPp8ZWYnoHIPytmbMOI56yquxuMIE9WQ1/mcp"
}
}
}- Step 01
Open MCP Settings
Press Cmd+Shift+P (macOS) or Ctrl+Shift+P (Windows/Linux) → search "MCP Settings"
- Step 02
Add the server config
Paste the JSON configuration above into the mcp.json file that opens
- Step 03
Save the file
Cursor will automatically detect the new Connector
- Step 04
Start using BoxyHQ (Enterprise SSO)
Open Agent mode in chat and ask: "Using BoxyHQ (Enterprise SSO), help me...". 8 tools available
VS Code Copilot · IDE configuration
Advanced setup
{
"mcpServers": {
"boxyhq-enterprise-sso": {
"url": "https://edge.vinkius.com/vk_preview_mklve50aPp8ZWYnoHIPytmbMOI56yquxuMIE9WQ1/mcp"
}
}
}- Step 01
Create MCP config
Create a .vscode/mcp.json file in your project root
- Step 02
Add the server config
Paste the JSON configuration above
- Step 03
Enable Agent mode
Open GitHub Copilot Chat and switch to Agent mode using the dropdown
- Step 04
Start using BoxyHQ (Enterprise SSO)
Ask Copilot: "Using BoxyHQ (Enterprise SSO), help me...". 8 tools available
Windsurf · IDE configuration
Advanced setup
{
"mcpServers": {
"boxyhq-enterprise-sso": {
"url": "https://edge.vinkius.com/vk_preview_mklve50aPp8ZWYnoHIPytmbMOI56yquxuMIE9WQ1/mcp"
}
}
}- Step 01
Open MCP Settings
Go to Settings → MCP Configuration or press Cmd+Shift+P and search "MCP"
- Step 02
Add the server
Paste the JSON configuration above into mcp_config.json
- Step 03
Save and reload
Windsurf will detect the new server automatically
- Step 04
Start using BoxyHQ (Enterprise SSO)
Open Cascade and ask: "Using BoxyHQ (Enterprise SSO), help me...". 8 tools available
Cline · IDE configuration
Advanced setup
{
"mcpServers": {
"boxyhq-enterprise-sso": {
"url": "https://edge.vinkius.com/vk_preview_mklve50aPp8ZWYnoHIPytmbMOI56yquxuMIE9WQ1/mcp"
}
}
}- Step 01
Open Cline MCP Settings
Click the Connectors icon in the Cline sidebar panel
- Step 02
Add remote server
Click "Add Connector" and paste the configuration above
- Step 03
Enable the server
Toggle the server switch to ON
- Step 04
Start using BoxyHQ (Enterprise SSO)
Ask Cline: "Using BoxyHQ (Enterprise SSO), help me...". 8 tools available
Claude Code · Terminal command
Advanced setup
claude mcp add boxyhq-enterprise-sso --transport http "https://edge.vinkius.com/vk_preview_mklve50aPp8ZWYnoHIPytmbMOI56yquxuMIE9WQ1/mcp"- Step 01
Install Claude Code
Run npm install -g @anthropic-ai/claude-code if not already installed
- Step 02
Add the Connector
Run the command above in your terminal
- Step 03
Verify the connection
Run claude mcp to list connected servers, or type /mcp inside a session
- Step 04
Start using BoxyHQ (Enterprise SSO)
Ask Claude: "Using BoxyHQ (Enterprise SSO), show me...". 8 tools are ready
Where the request belongs
Work BoxyHQ can move forward.
This is for the identity ops person who's tired of manual entry and the security engineer who needs to audit dozens of SSO connections without losing their mind. It's for anyone who wants to move faster on enterprise onboarding without making a mistake in a metadata XML file.
Security Engineer
Audits SSO configurations and updates metadata to keep the perimeter tight.
DevOps Engineer
Sets up SCIM directories and SAML connections during rapid customer onboarding.
Product Manager
Checks the health of enterprise integrations to ensure customers stay connected.
Build the capability set
Add more capabilities.
Each Connector adds new actions and data without changing how you work.
Browse ConnectorsWorkOS
Manage enterprise organizations, SSO connections, and directory sync on WorkOS. the platform for enterprise-ready features.
Okta
Equip your AI agent with Okta Identity Cloud to manage users, groups, and seamless authentication effortlessly.
Atlassian Crowd
Equip your AI agent to manage users, groups, and directory memberships via the Atlassian Crowd API.
FusionAuth (Enterprise Identity & Auth)
Manage enterprise identity, users, and applications via FusionAuth. create users, list applications, and handle authentication flows directly from any AI agent.
Auth0
Manage IAM operations—users, clients, connections, and logs in your Auth0 tenant directly via your AI agent.
PropelAuth (B2B Authentication)
Manage B2B authentication, users, and organizations via PropelAuth. handle user provisioning, org management, and API keys directly from your AI agent.
Bring your own AI
Change the model, client or framework. Keep BoxyHQ connected.
-
Claude -
ChatGPT -
Gemini -
Cursor -
VS Code -
Windsurf -
ZCode -
Cline -
Zed -
Continue -
Kiro -
Roo Code -
Zencoder -
Goose -
Void -
Augment Code -
Amp -
Qodo -
Tabnine -
Pieces -
Sourcegraph Cody -
JetBrains -
Warp -
Amazon Q -
Antigravity -
BoltAI -
Raycast -
Jan -
LM Studio -
AnythingLLM -
Open WebUI -
Msty -
Cherry Studio -
LibreChat -
TypingMind -
Chorus -
5ire -
n8n -
LangChain -
LlamaIndex -
CrewAI -
Vercel AI SDK
Before you connect
Questions about BoxyHQ.
The practical details behind the request, access and result.
Can the BoxyHQ (Enterprise SSO) MCP help with SAML setup?
Yes, it allows you to create and manage SAML connections using natural language. You can provide a metadata URL or raw XML, and the Connector will handle the configuration for you.
How does BoxyHQ (Enterprise SSO) handle user provisioning?
It automates user provisioning by creating and managing SCIM 2.0 directories. This connects your identity provider to your products for automated syncing.
Can I use BoxyHQ (Enterprise SSO) to audit my existing connections?
Yes, you can ask your agent to list all active SSO connections or retrieve specific metadata for any tenant to ensure your security posture is up to date.
Does BoxyHQ (Enterprise SSO) support OIDC?
Yes, the Connector supports both SAML and OIDC connections, allowing you to manage various types of enterprise authentication in one place.
How do I check if my BoxyHQ instance is online using this Connector?
You can simply ask your agent to check the service health. It will verify that the BoxyHQ platform is running correctly and reachable.
Can I delete old SSO connections with BoxyHQ (Enterprise SSO)?
Yes, you can use the Connector to remove stale or unnecessary connections. This helps keep your environment clean and reduces your security surface area.
Can I configure a SAML connection using just the metadata URL?
Yes! Use the add_connection capability and provide the metadataUrl. The server will fetch and process the IdP configuration automatically.
How do I find the clientID for an existing connection?
You can use the get_connections capability by providing the tenant and product IDs. It will return all matching connections including their unique clientIDs.
Does this support SCIM for automated user provisioning?
Absolutely. Use the create_directory capability to set up a SCIM 2.0 directory for providers like Okta, Azure AD, or Google, including webhook support for events.
One connection away
Give your agent a direct line to BoxyHQ.
Connect BoxyHQ once. Keep it beside 5,900+ managed Connectors when the next task needs more.
Explore every Connector No credit card required · Free tier available