# Administrator guide (https://docs.idra.zone/docs/admin)

Manage people, groups, apps, single sign-on, provisioning, authenticators, policies and devices in the IdRa admin console.

- [People and administrators](https://docs.idra.zone/docs/admin/users): Add and import people, manage their lifecycle and admin roles.
  - [Groups](https://docs.idra.zone/docs/admin/groups): Groups, group rules, the Everyone group and temporary membership.
  - [Expressions](https://docs.idra.zone/docs/admin/expressions): The expression syntax IdRa supports.
  - [Applications](https://docs.idra.zone/docs/admin/applications): Add apps from the catalog, assign them, and choose how people sign in.
  - [OpenID Connect and OAuth 2.1](https://docs.idra.zone/docs/admin/oidc): Connect apps to IdRa's authorization server.
  - [SAML 2.0 single sign-on](https://docs.idra.zone/docs/admin/saml): Connect SAML service providers, SP- or IdP-initiated.
  - [SCIM provisioning](https://docs.idra.zone/docs/admin/scim): Outbound SCIM to apps, inbound SCIM from HR systems or other IdPs.
  - [Identity providers](https://docs.idra.zone/docs/admin/identity-providers): Let people sign in with an external IdP or a social account.
  - [Partners](https://docs.idra.zone/docs/admin/partners): Give another organization's people access to specific apps.
  - [Authenticators](https://docs.idra.zone/docs/admin/authenticators): MFA methods, enrollment policies, account recovery and sign-in protection.
  - [Policies](https://docs.idra.zone/docs/admin/policies): Session policy, app authentication policies, network zones and risk.
  - [Devices and MDM](https://docs.idra.zone/docs/admin/devices): Device assurance, MDM sync and client certificates.