Clay added SCIM provisioning, so admins can connect Okta, Azure AD or another identity provider through the WorkOS Admin Portal and have workspace members added and removed automatically, with identity provider groups mapped to the Admin, Editor, Viewer and Sales rep roles. SSO is not a prerequisite. The same release lets the Write to Audiences workflow node upsert records by External record ID instead of creating duplicates, and lets previewed signal results in Audiences start a workflow directly.
Workspace access now follows the identity provider, so people who leave the company lose Clay access without an admin removing them by hand. Upsert by external ID stops parallel workflow runs from writing the same audience record twice.