Production Readiness Scalekit

Webhook reliability:

• Webhook endpoint returns 2xx quickly — offload heavy processing to a queue if needed
• Scalekit retries on non-2xx with exponential backoff (up to 8 attempts over ~10 hours)
• Tested webhook delivery end-to-end with a real IdP or Scalekit's test tool

User and organization management

• Test organization creation and domain assignment
• Test adding and removing users from organizations
• Set allowed email domains for org provisioning (if applicable)
• Set default roles for auto-provisioned users
• Test user deletion flow

RBAC (if implemented):

• Define roles and permissions that map to IdP groups
• Test role assignment via group membership sync
• Verify permission enforcement at API endpoints
• Test access control across all role levels

Network and firewall

Enterprise customers behind VPN or corporate firewall must whitelist:

• Customer firewalls allow Scalekit domains
• SCIM provisioning tested from customer's network environment

Monitoring and incident readiness

• Webhook event monitoring and logging active
• Error tracking configured for provisioning failures
• Alerts configured for failed webhook deliveries
• Log retention policies configured
• Webhook delivery and retry mechanism tested
• Incident response runbook written (who to contact, how to roll back)
• Rollback plan ready (disable SCIM sync without breaking existing users)

Key metrics:

• Webhook delivery success rate
• User provisioning/deprovisioning latency
• Failed sync events (by type and error)
• Group-to-role mapping accuracy