Which company sign-in providers are supported?
Configure a SAML or OpenID Connect provider where SSO is enabled for your deployment. Confirm the enabled options with your identity and IT owners.
Manage company sign-in and MFA
Let your team sign in through a company identity provider where SSO is enabled. Require an extra verification step, choose the factors members can use and protect sensitive account changes.
Organization sign-in
- Identity provider
- Company provider
- Connection
- Configured by an administrator
SSO is available when enabled for the deployment and configured for the organization.
MFA enrollment
- Organization rule
- MFA required
- Factor
- Authenticator app
- Enrollment step
- Verify a one-time code
Required enrollment is completed before opening protected work pages.
Company identity providers
Connect your organization’s SAML or OpenID Connect provider when SSO is enabled for your deployment. Members can then use the configured company sign-in method.
Choose separately what each member can do and which emails or documents they can read. Access controls keep those permissions with the information.
Choose the factors your members can use
Choose authenticator codes, supported security keys or device authenticators. Email and SMS options depend on your allowed-factor settings and available delivery.
Set the factors members can enroll before requiring MFA. The administrator enabling the requirement must already have the applicable factor set up.
Require verification before members open their work
Members complete the required verification before accessing protected work pages. Those who still need to enroll a factor are directed to account setup first.
Choose enrollment, factor delivery and account-recovery arrangements that fit your organization, with a clear owner for support.
Protect sensitive account changes
Sensitive security changes can require a fresh MFA check. Review the relevant sign-in, enrollment and account-security events under your deployment’s settings.
Keep the identity provider, factor delivery and recovery responsibilities with the people who administer them. Use the evaluation guide to agree your organization’s requirements.
Common questions
Can someone skip required enrollment and open work pages?
Members complete required enrollment and verification before opening protected work pages, using the factors your organization allows.
Use company sign-in and verification that fit your team
Review enabled sign-in options, factor enrollment and sensitive account changes with your identity and IT owners.