What is ScaiKey?

Every service in the ScaiLabs ecosystem needs to know who's making a request and what they're allowed to do. ScaiKey is the single source of truth for both questions.

ScaiKey is an identity provider (IdP) and access management platform built around a four-level hierarchy: Platform, Partner, Tenant, User. This hierarchy maps naturally to real-world organizational structures — a platform operator manages partners, partners manage their customers (tenants), and tenants manage their users.

Whether you're an enterprise running ScaiLabs for internal use or a service provider offering AI to hundreds of customers, ScaiKey provides the identity layer that keeps everyone properly isolated and authenticated.

Multi-Tenancy Modeltext

Platform (ScaiLabs or self-hosted operator)
  └─ Partner A (Service Provider / Reseller)
  │    ├─ Tenant 1 (Customer)
  │    │    ├─ User groups, roles, permissions
  │    │    └─ Users
  │    └─ Tenant 2 (Customer)
  │         └─ ...
  └─ Partner B (Enterprise client)
       └─ Tenant 1 (Department / Division)
            └─ ...

Key Capabilities

Microsoft Entra ID / Azure AD

Sync users and groups, enable SSO with existing Microsoft accounts

Google Workspace

Use Google identities across ScaiLabs services

SAML 2.0

Connect any SAML-compliant identity provider

Custom OIDC providers

Federate with any OpenID Connect-compliant IdP

Integration

ScaiGrid

User authentication, tenant-scoped model access, API key validation

ScaiWave

User identity, room membership, cross-federation messaging

ScaiDrive

File ownership, share permissions, quota management

ScaiBot

Session identity, conversation attribution

ScaiCMS

Content permissions, workflow assignments

ScaiVault

Secret access control

ScaiDNS

Domain and record-level permissions

Use Cases

Enterprise deployment

One tenant, federated with Entra ID, SSO across all ScaiLabs services. Users log in once with their existing corporate credentials.

Service provider platform

Multiple partners, each managing their own tenant base. Each tenant can federate with their own IdP. The partner sees aggregate data; tenants see only their own.

MSP managed workspace

The MSP is the partner, each client is a tenant. ScaiKey provides unified identity management across ScaiWave, ScaiBot, ScaiDrive, and any other deployed services.

Learn more

View API Documentation →