Skip to main content

Workspace Settings

The Workspace Settings page provides centralized management for organization-wide configurations, enterprise security policies, team boundaries, licensing, and cloud vendor credentials.

Navigate to RESOURCE → Settings in the Aegis Console to configure settings.

Scope Switching: Organization vs Team Levels​

The platform employs a two-tier scoping hierarchy. Use the Scope Switcher dropdown in the top header bar to toggle between setting levels:

  1. Organization Level (Global Scope): Applies centrally across the entire enterprise organization.
  2. Team Level (Team Scope): Applies exclusively to the selected team boundary.

The configuration tabs available on the Workspace Settings page automatically adapt based on the selected scope.

1. Organization Level Settings (Global Scope)​

When operating at the Organization Level, six administration tabs are available:

Tab 1: General​

  • Display Name: The public display name of your organization.
  • Resource ID (Slug): The immutable unique identifier for the organization (read-only).

Tab 2: Authentication (SSO)​

Enterprise Single Sign-On (SSO) integrates Taimoe AI Gateway with corporate Identity Providers (IdPs) like Microsoft Entra ID (Azure AD).

  • SSO Status Badge: Displays configuration health (Active, Draft, Testing, Error, Disabled, or Not configured).
  • Run Setup Wizard: Click "Run Setup Wizard" for an interactive, step-by-step guide to configure Azure App Registration.
  • Users & Domain:
    • SSO Domain: Configure your corporate email domain (e.g., company.com). Users with emails matching this domain are automatically routed to SSO sign-in.
  • Credentials Configuration:
    • Client ID: Application (Client) ID from Azure AD App Registration.
    • Tenant ID: Directory (Tenant) ID from Azure Portal.
    • Client Secret: Write-only secret field. Shows •••••••• when configured with an Update option.
  • SSO Policies:
    • Enforce SSO Toggle: Forces all users under the domain to authenticate via SSO. Local email/password logins are blocked.
    • JIT (Just-in-Time) Provisioning Toggle: Automatically creates new user accounts in Aegis upon their first successful SSO login.
  • Redirect URI (Callback URL): Read-only, copyable callback URL (e.g., https://<gateway>/api/v1/sso/callback). Copy and paste this exact URL into your Azure AD App Registration → Platform Configurations.

Tab 3: Teams​

Manage internal teams and departmental boundaries within the organization.

  • Team Directory: Lists all active teams, their slugs, and settings shortcuts.
  • Add Team: Click "+ Add Team" to create a team by specifying:
    • Display Name (e.g., Data Science, Marketing).
    • Team ID (Slug) (lowercase alphanumeric and hyphens, e.g., data-science).
  • Manage Settings / Delete: Direct action buttons to switch scope or delete teams.

Tab 4: Subscription & License​

Manage deployment licensing and offline tier activations.

  • Current Tier Badge: Displays active subscription level (Free, Teams, Enterprise).
  • Expiration Date: Displays license key expiration date or Never (free tier).
  • License Status: Verification status badge (Valid, Awaiting verification, Unverified, Expired, Revoked).
  • Active License Key Inspection: Preview panel displaying key metadata (Issued to, Bound Organization, Issued Date, Key ID).
  • Activate / Update License Key: Paste a signed JWT license token string into the text field and click "Activate License" to unlock Teams or Enterprise feature gates offline.

Tab 5: Cloud Credentials (Org-Wide)​

Manage central cloud provider credentials (GCP Vertex AI, AWS Bedrock, Azure OpenAI, OpenAI Direct) shared across the organization.

Tab 6: Custom Branding (Enterprise)​

  • Custom Logo: Upload a custom company logo URL to replace default platform branding.
  • Platform Title: Set a custom platform name displayed in the top header and navigation sidebar.

2. Team Level Settings (Team Scope)​

Selecting a specific team from the top scope dropdown switches the Settings page to Team Scope. Settings made here apply strictly within that team boundary:

Tab 1: General & Danger Zone​

  • Display Name: Update the display name for the specific team.
  • Resource ID (Slug): The immutable unique team ID (read-only).
  • Danger Zone (Delete Team): Permanently deletes the team, including all associated Virtual Keys, team rate limits, budgets, and member bindings. Requires typing the team name to confirm.

Tab 2: Cloud Credentials (Team-Scoped)​

  • Add and manage cloud credentials dedicated exclusively to this team. Team-scoped credentials provide strict security and billing isolation, ensuring team API requests route using department-owned credentials.