Two Step Verification, Single Sign On, and Session Management
Protect accounts, configure team sign in policies, and revoke unused device sessions.
Two step verification
Personal accounts can use an authenticator app. Keep recovery codes in a separate secure place. SMS is not the primary method.
Single sign on
The Team plan supports SAML. An administrator verifies the domain and uploads identity provider metadata. Test an emergency administrator account before requiring SSO.
Sessions
Review devices, recent activity, and approximate locations in personal security settings. Revoke unknown sessions promptly and change your password.
Administrator policies
Administrators can require two step verification, restrict allowed domains, and set idle session expiry.
Sign in problems
Use the emergency administrator account to repair an incorrect SSO configuration. Members should contact the workspace administrator.