ToolJet
Cloud and self-hosted app builder for teams to create and securely run internal tools with AI workflows.
What is ToolJet?
Try ToolJetToolJet helps teams build, secure, and run internal applications by combining app development workflows with enterprise-grade access management. You can control who can build, view, and deploy apps using fine-grained roles and custom groups, connected to the identity provider your team already uses. With SSO and automated provisioning, user onboarding and offboarding stay consistent across every environment and workspace.
What does ToolJet’s enterprise access management help you manage?
ToolJet centralizes authentication and permissions so you can onboard users quickly, control access with fine-grained roles and custom groups, and connect to your existing identity provider. It supports the full user lifecycle, including archiving users without breaking audit trails, while keeping access tied to apps, data sources, and workflows.
How does user onboarding and offboarding work in ToolJet?
You can invite users one-by-one, bulk import via CSV, or let users self-register with domain control. When it’s time to remove access, ToolJet archives users without deleting their data, so the history remains intact and the action is reversible.
Does ToolJet support SSO with my existing identity provider?
Yes. ToolJet supports multiple SSO options including GitHub and Google OAuth, SAML 2.0 (such as Okta and Entra ID), LDAP/Active Directory, and OIDC providers like Azure AD, Auth0, and OneLogin. You can configure SSO at the instance level and also override it per workspace for teams with different authentication requirements.
Can ToolJet automatically provision and sync users from my IdP?
Yes. With SCIM 2.0, ToolJet can automate user provisioning and group sync (create, update, deactivate, and keep groups aligned) from your identity provider. It also supports mapping IdP group membership to ToolJet roles and custom groups during login for OIDC and SAML setups.
How do roles and custom groups control what users can do?
ToolJet includes three built-in roles (Admin, Builder, End User) and lets you create unlimited custom groups with action-level permissions. Permissions can be applied to apps, data sources, workflows, and folders, enabling least-privilege access such as Builders creating apps while End Users can only view released apps.
Is ToolJet difficult to set up for non-DevOps teams?
ToolJet is designed to be managed from one place: you set up authentication and authorization centrally, then apply workspace overrides when needed. User management supports several onboarding methods (invites, CSV, or self-signup), and access can be tied to standard identity protocols like SSO and SCIM to reduce ongoing admin effort.