Claude Enterprise Setup for IT Admins 
Engagements starting at $10k. A Claude Implementation Partner engagement that puts Claude Enterprise under IT control.
$10,000
2–3 weeks
Companies deploying 150+ Claude Enterprise licenses, or upgrading from individual / team accounts
Five outcomes. Every one documented.
01
One identity
02
Privacy by decision
03
Apps on managed devices
04
Logs Security can see
05
A runbook your team owns
Five Layers to deploying Claude Enterprise
- Google SAML SSO, enforced
- SCIM provisioning from Google Groups
- Domain capture of every corporate account
- 2-3 Owners with a break-glass procedure
- Model-training opt-out verified
- Retention and sharing controls set
- Secrets policy plus DLP detectors
- HIPAA BAA and GDPR where required
- Claude Desktop packaged for Jamf, Kandji, or Intune
- Claude Code limited to developers, managed settings by MDM
- Connectors, sharing, and Skills: a recorded decision each
- Baseline Projects for IT, Engineering, and Helpdesk
- Export pipeline to a locked GCS bucket
- Forwarding to Splunk, Datadog, or Chronicle
- Alert rules with named owners
- Every rule test-fired
- 12-test acceptance script
- Runbook and templates
- 60-minute recorded handoff
FAQ
Does Claude Enterprise support Google Workspace SSO?
Yes. Claude Enterprise supports SAML SSO with Google Workspace as the identity provider, and SCIM provisioning from Google Groups. We configure both, enforce SSO after a notice period, and keep one documented break-glass Owner on hardware-key MFA.
What is Claude domain capture?
Claiming your verified email domain so every Claude account using it belongs to your organization. Existing personal accounts on the corporate domain move into the org with their conversations intact, and new corporate sign-ups route into it automatically. We send a user notice before claiming.
Is company data used to train Anthropic models?
No. Claude Enterprise excludes organizational data from model training by default. We verify the setting in the Admin Console, screenshot it for your records, and document the retention period alongside it.
Can I deploy Claude Desktop with Jamf or Intune?
Yes. Standard macOS and Windows installers package for any major MDM, and we pilot the silent install on a test device group before scoping to production. Claude Code is governed separately through a managed-settings file pushed the same way.
Can Claude audit logs go to Splunk or Datadog?
Yes. The Admin Console audit log exports via API. We build a scheduled pipeline into a locked Google Cloud Storage bucket and forward to Splunk, Datadog, or Chronicle, then test-fire the alert rules so Security sees events within one interval.
Does Claude sign a HIPAA BAA?
A BAA is available on Enterprise contracts, and coverage varies by feature. We confirm scope with your Anthropic account team, restrict PHI to covered features, and add health-identifier detectors to the alert rules.
What if we’re on Claude Team, not Enterprise?
SSO, SCIM, domain capture, and audit export require Enterprise. We confirm your tier before kickoff and can help scope the upgrade so the setup runs as soon as the plan is in place.