What You Can Promise in a Security Review

IT will turn on SAML for this one domain. You invite the intake by CSV. Managers on the partner dashboard need different access. There is no SCIM, and there is no OIDC. This is the list a security review can be given, and the list it cannot.

What you can promise

• SAML single sign-on: one enabled connection, one verified domain.
• A bulk invite from a CSV or XLSX file.
• Role-based access on the partner dashboard.
• Exports of who understood the material and where the gaps are, as CSV, PDF, or XLSX.
• SCORM and xAPI: Elqo can layer on content already published in those formats.

Price is a conversation, sized to the seat cap and to monthly active users. There is no public rate card. Book a demo if the review needs a person to walk the list.

What you cannot promise

• SCIM provisioning from the identity provider.
• OIDC.
• A unified audit log of who changed a lesson, who revoked access, or who edited a rubric.
• A switch for US, EU, or AU data residency.
• GDPR or FERPA stated as a certification.
• LTI, or a live connector to Canvas, Blackboard, Moodle, Cornerstone, or an HRIS.
• A fully branded portal, branded email, and branded report. A logo override is not that.

If the questionnaire asks for any of those, the honest answer is that Elqo does not provide them. Do not point the reviewer at a page that says otherwise. The comparison that already uses this boundary is when a Google Form is enough, which states SAML for one domain and a CSV invite, and says the rest is not included.

What the export is for

The export is the comprehension record: who could explain the source, and which topics they missed. It is CSV, PDF, or XLSX. It is not an audit log of admin changes, and it is not a residency certificate.

Questions buyers ask

Is there SCIM or OIDC?

No. Invite is CSV or XLSX. Sign-in, where it is turned on, is SAML for one verified domain.

Can we choose US, EU, or AU data residency?

No. There is no residency switch to promise in a review.

Are GDPR or FERPA certifications we can attach?

No. Do not state either as a certification.

Can results post back to the LMS over LTI?

No. Elqo can layer on content published as SCORM or xAPI. It does not post results over LTI, and it does not connect to a named LMS or an HRIS. The score leaves as a CSV, PDF, or XLSX export.