Thoryn

App connectors · App connectors

Intercom — SAML SSO via Thoryn

Intercom Premium SSO via SAML. Use Thoryn's SAML bridge.

Tested against:hub: 1.0.0intercom: Premium 2026

app-connectors recipe — shared category architecture: how this pattern composes with Hub, Broker, and the rest of the catalog

What you get

Intercom teammates sign in with Thoryn. Customer-facing chat is unaffected; this is teammate (agent) SSO only.

Setup

1. In Thoryn

hub saml-sp create \
  --name "Intercom" \
  --acs-url "https://app.intercom.io/users/auth/saml/callback" \
  --entity-id "intercom.io" \
  --sign-assertions true

2. In Intercom

Settings → Workspace → SSO → SAML. Paste:

FieldValue
SSO URLhttps://hub.thoryn.org/saml/sso/<sp-id>
Issuerhttps://hub.thoryn.org
Certificate(X.509 from step 1)

3. Attribute mapping

Intercom fieldSAML attribute
Emailemail (NameID)
First namefirstName
Last namelastName

Caveats

  • Premium plan required for SAML.
  • Intercom doesn't support SCIM — manage user lifecycle manually or via Intercom's API.

See also