Let your team log in with Google, Microsoft, username/password, or Enterprise SSO — customize login options for flexibility and security.
How to manage login methods
To customize login methods for your workspace:
Go to Settings → Authentication security
In the Login methods section, check the boxes to allow:
✅ Email and password
✅ Google and Microsoft
Click Save settings to apply your changes
💡 You can allow one or both options. Users will see all login methods on the login screen, but if they try to use a method that isn't allowed for them, they'll see a message with details about which methods are supported.
Login method options
Method | Description |
Username and password | Traditional login with email + password |
Google and Microsoft | Log in using Google or Microsoft OAuth |
Enterprise SSO | Connected with your organization’s IDP. |
💡You can allow multiple methods, but only one can be enforced at a time.
Login method enforcement
Allowing multiple methods lets users choose how they log in.
To enforce a specific method, allow only that method and uncheck the others.
If Enterprise SSO is enabled and enforced in the SSO section, it overrides all other login methods.
Enforced login methods apply to all users unless individually overridden.
⚠️ If SSO is enforced, users must log in through your Identity Provider (IdP). All other login options will be hidden.
Per-user settings
You can override the default workspace login method for individual users.
To update login methods for a specific user:
Go to Users
Select the user
Update their login method from the dropdown
✅ This is useful when testing new SSO setups or handling special access needs.
FAQ
What happens if I remove a login method that users were using?
They won’t be able to log in unless they’re assigned a valid alternative method.
Can I restrict login methods based on roles or groups?
Not yet — only per-user overrides are supported right now
What if a user belongs to multiple workspaces with different login settings?
The user can only log in using the method(s) allowed by all of their workspaces. For example, if Workspace A allows Google, Microsoft, and password login — but Workspace B allows only Google and Microsoft — the user will only be able to log in with Google or Microsoft.