Enterprise · 25 min read

Enterprise Security Setup

Configure enterprise-grade security with SSO, SAML 2.0, encryption, compliance controls, and comprehensive audit logging.

Single Sign-On (SSO)

Enable seamless authentication across your organization using industry-standard SSO providers.

Okta
Azure AD
Google Workspace
OneLogin
Auth0
Ping Identity

SSO Configuration Steps

1

Navigate to Security Settings

Go to Dashboard → Settings → Security → Single Sign-On

2

Select Your Identity Provider

Choose from supported providers or configure custom SAML

3

Configure Metadata

Upload IdP metadata XML or enter configuration manually

4

Test Connection

Verify SSO configuration with test authentication

SAML 2.0 Configuration

Configure SAML 2.0 authentication for secure, federated identity management.

Sponkly Service Provider Details

Entity ID

https://auth.sponkly.com/saml

ACS URL

https://auth.sponkly.com/saml/acs

Single Logout URL

https://auth.sponkly.com/saml/slo

Required SAML Attributes

AttributeRequiredDescription
emailUser email address
firstNameUser first name
lastNameUser last name
departmentOptionalUser department
roleOptionalUser role/permissions

Security Note: Ensure your IdP uses SHA-256 signing algorithm and X.509 certificate validation.

Data Encryption

Sponkly employs multiple layers of encryption to protect your data at rest and in transit.

Data at Rest

  • AES-256 encryption
  • Encrypted database storage
  • Encrypted file storage
  • Automated key rotation

Data in Transit

  • TLS 1.3 encryption
  • Perfect forward secrecy
  • End-to-end encryption option
  • Secure WebSocket connections

Bring Your Own Key (BYOK)

Enterprise customers can use their own encryption keys for additional security control.

Available on Enterprise plan

Compliance & Certifications

Sponkly maintains industry-leading security certifications and compliance standards.

🔒

SOC 2 Type II

Annual third-party security audit

🇪🇺

GDPR

EU data protection compliance

🏥

HIPAA

Healthcare data protection

🌐

ISO 27001

Information security management

💳

PCI DSS

Payment card security

🇺🇸

CCPA

California privacy compliance

Data Residency Options

Choose where your data is stored to meet regional compliance requirements:

United States
European Union
Asia Pacific
Canada
United Kingdom
Australia

User Management

Advanced user management with role-based access control (RBAC) and team organization.

Role Hierarchy

Owner

Full system access, billing, and security settings

Admin

User management, team settings, and configurations

Manager

Team oversight, meeting creation, and reports

Member

Join meetings, use translation features

Guest

Limited meeting participation

Team Organization

  • Department-based groups
  • Project-based teams
  • Custom permission sets
  • Bulk user provisioning

Access Controls

  • IP allowlisting
  • Session timeout policies
  • Multi-factor authentication
  • Device management

Audit Logs & Monitoring

Comprehensive audit logging for security monitoring, compliance, and incident investigation.

Logged Events

Authentication

  • User login/logout
  • Failed authentication attempts
  • Password changes
  • MFA events

User Management

  • User creation/deletion
  • Role changes
  • Permission updates
  • Team modifications

Data Access

  • Meeting creation/deletion
  • Recording access
  • Transcript downloads
  • API calls

Security Settings

  • SSO configuration changes
  • Encryption settings
  • IP allowlist updates
  • Security policy changes

Real-time Alerts

Configure alerts for critical security events:

  • Multiple failed login attempts
  • Unauthorized access attempts
  • Permission escalations
  • Unusual activity patterns

Log Retention

Configurable retention periods by plan:

  • Pro: 90 days
  • Business: 1 year
  • Enterprise: Custom (up to 7 years)
  • Export options available

SIEM Integration: Export audit logs to your SIEM tool via API or webhook for centralized security monitoring.

Next Steps