The Settings page contains organization-level configuration. Only Org Admins can access this page.
Organization Name
Update your organization’s display name. This name appears in the dashboard header, email notifications, and team invitations.
SSO Configuration
Configure Single Sign-On so your team members authenticate through your identity provider instead of username/password. See SSO Integration for a full setup guide.
Supported protocols:
API Keys
API keys authenticate the Policy-as-Code CLI and Python SDK. They are separate from your dashboard login and from the enrollment key.
Key prefixes:
ck_live_ — read/write (can apply policy changes)
ck_ro_ — read-only (plan/diff only, safe for CI plan steps)
The raw key is shown once at creation. Only a hash is stored. Keys can be identified by their first 12 characters shown in the dashboard.
Enrollment Key
The enrollment key is a long-lived credential used by Agent Charley to authenticate device registrations during MDM deployment. It is separate from user accounts and API keys.
Rotating or revoking the enrollment key will not disconnect already-enrolled devices, but any new enrollments using the old key will fail.
Danger Zone
Delete Organization
Permanently deletes your organization, all members, all devices, and all telemetry data. This action is irreversible.
You must type your organization name to confirm deletion.