# Administration

Manage your Tracix organization and workspaces, users and roles, SAML and OIDC single sign-on, SCIM provisioning, MFA, API keys and billing.

Set up who can use Tracix, how they sign in, and how your organization is billed. Most of these settings live in the console at `https://cloud.tracix.io`; API keys live in each workspace.

## Organization and access

- [Organizations and workspaces](https://tracix.io/docs/admin/workspaces): Rename, control access, update, suspend and delete

- [Users and roles](https://tracix.io/docs/admin/users-and-roles): Organization, workspace and custom roles

- [API keys and ingest keys](https://tracix.io/docs/admin/api-keys): Keys for collectors, webhooks, CI and SDKs

## Sign-in and security

- [Single sign-on with SAML or OIDC](https://tracix.io/docs/admin/sso): Domain verification, group mapping and required SSO

- [Provision users with SCIM](https://tracix.io/docs/admin/scim): Create and deactivate users from your identity provider

- [Multi-factor authentication](https://tracix.io/docs/admin/mfa): Authenticator apps, recovery codes and session policy

## Billing

- [Billing and usage](https://tracix.io/docs/admin/billing): Plan, usage meters, payment and invoices

- [Plans and limits](https://tracix.io/docs/get-started/plans-and-limits): What each plan includes

## Where each setting lives

| Setting                                                  | Where                                                   |
| -------------------------------------------------------- | ------------------------------------------------------- |
| Workspaces, workspace access and the source IP allowlist | Console, **Workspaces**                                 |
| Members, invites and roles                               | Console, **Team**                                       |
| Single sign-on, SCIM, MFA enforcement and sessions       | Console, **Security**                                   |
| Plan, usage and invoices                                 | Console, **Billing**                                    |
| Your own password and two-factor authentication          | Console, **Profile**                                    |
| API keys                                                 | Each workspace, **Settings › Tokens & API**             |
| Ingest keys for OpenTelemetry SDKs                       | Each workspace, **Applications › APM & Traces › Setup** |