Set up identity and access

Choose an identity provider

Bridgewerks can be configured for company-managed sign-in with Microsoft Entra ID or Google. Choose the provider your company already uses for employee identity, access reviews, and offboarding.

Your IT owner and Bridgewerks implementation lead will agree on:

• The approved company email domains.
• Whether access is domain-wide or limited to specifically invited people.
• Who may administer users and workspace settings.
• The redirect addresses required for your Bridgewerks deployment.
• How customer-managed credentials are stored, rotated, and monitored.

Configure company sign-in

The customer IT administrator creates or approves the identity-provider application. The Bridgewerks implementation lead supplies the deployment-specific redirect addresses and configures the customer workspace through the secure implementation process.

Do not send application secrets in ordinary email or copy them into this help center. Record the credential owner, creation date, expiration date, and renewal procedure without recording the secret itself.

Define the initial access list

Start with a small pilot group that covers the roles needed to test the product:

• At least one workspace administrator.
• An originations or deal-intake user.
• An underwriter or credit user.
• A closing or servicing user if those modules are in scope.

For each person, provide their company email, business role, required modules, and whether they need administrative access. Add the broader team only after the pilot group completes access testing.

Test access controls

Before launch, verify that:

1. An approved user can sign in and reach the expected modules.
2. A standard user cannot reach administrator-only controls.
3. A person outside the approved domain or invitation list is rejected.
4. A disabled test account loses access through the agreed offboarding process.
5. The customer knows who can approve new access and who performs periodic reviews.

Next: Invite your team.