SafeCadence is an SMTP
client: you point us at your own server (Exchange / Postfix
/ corporate relay / Gmail SMTP / SendGrid). Mail stays in your
estate's logs. Empty config = email DMs disabled, channel webhooks
still fire as a fallback.
Loading current config…
Tenant default notification routing
Used when a user has no
override for a category. Each user can change their own settings
on the "My notifications" tab. Admin-only.
My notification preferences
Toggle on the channels you want to receive each event kind on.
Channels you can't enable are grayed out — they require the
matching contact field on your user record (admin sets via
/users).
Trust note: the channel webhook (Slack / Teams / PagerDuty channel)
fires regardless of these toggles — backups still see every event.
These toggles control only the per-user direct delivery (email
DM, channel @-mention).
Webhooks
Send events to Slack / Teams / Discord / PagerDuty / Opsgenie /
ServiceNow / Google Chat / Webex / Mattermost / Rocket.Chat / any
JSON endpoint. Each webhook can filter by category (specific event
kinds) AND minimum severity. URLs are Fernet-encrypted at rest;
this page never displays the full URL once saved.
ID
Provider
URL preview
Categories
Min severity
State
Loading…
Each webhook fires independently — one dead Discord doesn't block
the Slack one. Failures are recorded in the audit log with the
provider name and reason.
OIDC SSO + capability auto-grant
SafeCadence's OIDC SSO (v7.4) federates auth to your IdP
(Okta, Entra, Auth0, Keycloak, Google). v9.54 added
capability auto-grant: every successful login reconciles
the user's IdP group claims against the
capability_map below and grants/revokes
capabilities to match. Manual grants made via /users#caps
are never touched.
Above fields are read-only here — edit them in
~/.safecadence/sso.json (file is mode 0600,
owned by the SafeCadence service user).
capability_map (group → capabilities)
One row per IdP group claim value (the literal string the IdP
emits in groups, roles, or
memberOf). The right column is a comma-separated
list of capability names from the
capabilities matrix. Save validates
that every capability is real — typos won't silently grant
nothing.