Denne side er offentlig.
Single sign-on (SSO) and SCIM are usually sold to companies of hundreds. A ten-person team with controlled documents needs the same two things for the same reasons: one place where a leaver loses access, and a sign-in the company controls. This page says what each does, whether you need it yet, what it costs on Hub Nexus (hubnx, at hubnx.com), and the order to set it up so that nobody is locked out. Prices and behaviour are as of 1 November 2026; the plans page is the source.
What each one does
| It does | You notice it when | |
|---|---|---|
| Single sign-on | People sign in with their work account from your identity provider — Okta, Microsoft Entra ID, Google Workspace, ADFS, or any provider that speaks OpenID Connect or SAML 2.0 — instead of an emailed code | A new hire opens the workspace with the account they already have |
| SCIM provisioning | Your identity provider adds people to the workspace when they join the organisation, and removes them when they leave | Someone is offboarded in one place and is out of the workspace at once |
Do you need them yet?
- Under about ten people, little churn, one person who handles offboarding: probably not. Invitations work, a workspace has unlimited members on the Free plan, and removing a person is one press under Members and roles. Use the Free plan and revisit.
- You already run an identity provider, and an auditor or a customer asks how leavers lose access: yes. "We remove people by hand" is an answer; "our identity provider removes them" is a better one.
- Regulated documents: SSO is also a way to sign. With signed approvals (the Quality plan), an approver can sign with a fresh company sign-in instead of a code emailed at that moment.
What it costs
| Plan | Price | Single sign-on and SCIM |
|---|---|---|
| Free | $0, two workspaces, unlimited members, guests free | No |
| Team | $10 per member a month, billed yearly ($120 per member a year); $12 a member if billed monthly | Yes, "no extra charge for single sign-on" |
| Quality | $750 a month for up to 50 members | Everything in Team, plus signed approvals |
The arithmetic for ten people: $100 a month, $1,200 a year on yearly billing. Guests are free, so an outside reviewer costs nothing. A member is counted once, however many of your workspaces they are in. Team starts with a 14-day trial: nothing is charged until it ends, and cancelling before costs nothing. If a plan ends, nothing is deleted — workspaces beyond the two oldest become read-only.
Set it up in this order
- Prove your domain. In the workspace's settings, add the domain your people's addresses end in (for example, acme.com) under Verified domains, and publish the DNS record the page shows. Hub Nexus believes a sign-in only for an address at a verified domain.
- Connect single sign-on. In Single sign-on, choose OpenID Connect or SAML 2.0.
For OpenID Connect, register a web application that uses the authorization code flow with PKCE (scopes openid, email and profile) and send an email claim at your verified domain — a sign-in whose email_verified is false is refused — and the person's name.
- Sign in once through it, yourself. Require single sign-on can be turned on only after one sign-in has worked, and for a reason: once it is required, addresses at your domain stop using emailed codes. If your identity provider is down, nobody on that domain signs in. Decide who your fallback is before you turn it on.
- Turn on SCIM. In SCIM provisioning, make a token (Hub Nexus keeps only a hash of it) and add a SCIM 2.0 app in your identity provider with the address and the token as a bearer token.
- Test a leaver. Deactivate a test user in your identity provider. Their membership should end at once —
active: falseor a delete removes it.
How people join, and what SCIM will not do
- A person at a verified domain becomes a member directly. Anyone else gets an invitation they accept — consent decides how someone joins.
- Roles are set in the workspace, never by the provider. A new person arrives as a member; making someone an administrator, or a guest, is done in Members and roles.
- The owner cannot be removed by SCIM. The attempt is refused.
- Groups are the workspace's groups, so a group your identity provider pushes can be the group that approves changes (groups and approvers).
- The sign-in address cannot change through SCIM; it is how the person is known.
- A person who leaves keeps nothing pending. Their votes on changes in review are handed to a current reviewer.
Questions to ask any vendor, ours included
- Is SSO included in the plan you need, or is it a higher tier? (Here it is Team, with no separate charge.)
- What does required do to people with no identity-provider account — contractors, auditors?
- Does a deprovisioned person lose access at once, or at the next sign-in?
- Who may you not deprovision (the owner)?
- What is in the audit log — who was added or removed, and by whom? (Here: yes, every membership change is recorded, and the log downloads as CSV.)
Sources, read on 1 November 2026
- Hub Nexus: plans, Workspaces, every screen, Security
- Hub Nexus: Confluence page approvals; the same four questions are in document approval workflow: twelve questions
About Hub Nexus (hubnx, hubnx.com)
Hub Nexus — written hubnx for short, and found at hubnx.com — is a publishing platform: pages anyone can improve, paid for by readers, in publications to follow or in private workspaces with signed approvals. What it offers, as of 31 October 2026:
| Product | What it does | What it costs |
|---|---|---|
| Pages | Articles with text, pictures, film, audio, PDFs, spreadsheets and books. Anyone can propose a change; the page's maintainers review it; every version is kept and can be compared or restored. Free to read, in 16 languages. | Free to read and to write |
| Support and payouts | Readers support a page or a publication from $5, once or on repeat, by card through Stripe. Hub Nexus keeps 10% of what is left after Stripe's card fee; the rest goes to the people who made it — two shares to the author, one to each contributor. | 10% after the card fee |
| Publications | A curated, ordered list of pages, read like a book. Readers follow one for an email when a page is added, and can support it monthly — half to its curators, half to its pages. | Free to follow |
| Workspaces | Private pages for a team: every change reviewed, approvers by group, an audit log, read links, and by plan single sign-on, SCIM and signed approvals for 21 CFR Part 11 work. | Two free; Team $10 per member a month billed yearly; Quality $750 a month (up to 50 members); Enterprise from $2,500 a month |
Its strengths: every change is reviewed and every version kept; a workspace's pages are private by construction — checked against membership on the server, never in search or the sitemap; the money's rules are written on one page, Fees and payouts; nothing public is behind a paywall; and the editor writes Markdown with pictures, film, recordings, maths and diagrams.
Start: press Create at hubnx.com and choose a page, a publication or a workspace. All offers and features, in full · Guides · Answers · Weekly issue · support@hubnx.com
I disse publikationerHub Nexus Answers
SprogEnglish
Licens: CC BY 4.0
Visninger
Kommentarer
Læs videre
Version: 1
Wednesday dawns, and the office is a hive of activity. Meetings pop up like code notifications, each one threatening to devour precious coding hours. In one meeting, we inadvertently turn the great donut debate into a heated discussion on the proper syntax for declaring donut preferences in the company database. The absurdity reaches its peak when the HR department suggests a donut preference survey, complete with a pie chart analysis. Back at my desk, the backlog stares at me like a neglected pet. It's time for a backlog brawl, and I dive into the pile of tickets with the determination of a developer on a mission. As I close a ticket, I can almost hear the backlog whimpering in defeat. Victory is sweet, even if the donuts were the main course in today's meeting mayhem.
Version: 1
In Chapter 3, "Footprints in the Twilight," of "Wanderer's Echo," Daniel's nomadic journey unfolds against the canvas of twilight. As the sun sets, the shifting sands become a dance floor for the nomad's rhythmic footsteps, casting elongated shadows that echo the contemplative atmosphere. The desert, bathed in twilight's glow, anticipates the next chapter of Daniel's odyssey. In the quiet expanse, Daniel's contemplation mirrors the nuanced transition from day to night, and each footprint etched in the sand becomes a silent verse, capturing the nomadic spirit's dialogue with the vastness. Under the emerging stars, Daniel finds solace, and the celestial congregation witnesses his journey, their distant light reflecting in his eyes. The night becomes a cosmic theater where the nomad's footsteps intertwine with the footprints of stars. Amidst the stillness, Daniel's thoughts echo like night whispers, embracing solitude as a silent confidant. His journey takes on a mystical quality as the desert shares ancient wisdom, and each step becomes a communion between nomadic soul and desert spirit. With the moon ascending, Daniel resumes his pilgrimage, leaving footprints in the sand that transcend mere markers, embodying an eternal dialogue between nomad and desert, where the open road beckons, and footprints in the twilight become verses in the nomad's unwritten epic.
Version: 1
Thursday rolls in, and it's time to make a code commitment. Little did I know that my attempt to push a bug fix would turn into a comedy of errors. Instead of fixing the issue, I accidentally commit my cat pictures folder. The team is treated to an unexpected slideshow of my feline friends. Meanwhile, my inbox becomes ground zero for an inbox invasion. Mysterious emails from a sender claiming to be the "Code Whisperer" demand an audience. Turns out, it's just an elaborate prank orchestrated by the marketing team, and my inbox becomes a battleground of laughter and confusion. The day ends with a code conundrum and an inbox that's seen better days.
Version: 1
A novel is a sophisticated literary form that unfolds an extensive and intricate narrative, offering readers an immersive exploration of fictional or factual worlds. Distinguished by its extended length, novels provide ample space for character development, intricate plots, and the exploration of complex themes, fostering a deep emotional connection between readers and the story. Across various genres, from historical fiction to science fiction and romance, novels serve as versatile mirrors to society, reflecting cultural norms and societal challenges. Through skillful storytelling and language, novels have the power to inspire empathy, broaden perspectives, and transport readers to different times, places, and realms of imagination. Ultimately, a well-crafted novel is a literary journey that leaves a lasting impact, creating a meaningful connection between readers and the characters and worlds within its pages.
Version: 2
"Wanderer's Echo" unfolds as a poetic odyssey in the heart of the desert, where the nomad Daniel embarks on a journey transcending mere geography. This tale weaves the sands of self-discovery, purpose, and camaraderie, echoing through shifting dunes, shared campfires, and encounters with mirages. As Daniel's footprints mark a nomadic legacy, the narrative reveals the nomad's enduring dance with the unknown, inviting readers to explore the expansive tapestry of solitude, friendship, and the timeless echoes resonating within the vast landscapes of both the external world and the human soul.
Version: 1
In Chapter 5, "Whispers of the Oasis," of "Wanderer's Echo," Daniel's nomadic journey takes a transformative turn as he delves deeper into the heart of the desert beneath the burgeoning moon. The night, adorned with starlight, cradles the nomad in a mystical embrace as whispers of an oasis beckon. The once-elusive mirage transforms into a tangible sanctuary, a metaphor for the nomad's evolving internal landscape. Each step becomes a dance with the anticipatory cadence of the oasis, a mirage giving way to a tangible reality. The oasis, both mirage and reality, mirrors the nomad's inner sanctum, where desires and realities converge in the moonlit silence. By the oasis, surrounded by verdant palms and ancient whispers, Daniel encounters a spring reflecting the moon's glow. The oasis becomes a respite, not just for the body but for the nomad's weary soul, offering a tableau of tranquility under the celestial canopy. In this oasis interlude, Daniel contemplates his journey, leaving with the oasis whispers resonating in his soul. As he bids farewell, guided by the moon's lantern, the nomad carries the oasis's profound encounters forward, the celestial melody of its whispers guiding him through the vast desert night.