The Authentication and System Settings page allows users with the IT Administrator role to configure how employees authenticate to the platform. The available authentication modes support a range of organisational requirements, from traditional email and password authentication to single sign-on (SSO) integrations.
Authentication Modes
The platform supports four authentication modes.
Password Only
In Password Only mode, users sign in using their email address and password.
This is the default authentication method and is suitable for organisations that do not require single sign-on.
Single Tenant SSO Only
Single Tenant SSO Only delegates authentication entirely to a single identity provider (IdP). Password-based authentication is disabled, and all users must sign in through the configured SSO provider.
This option is best suited for organisations that use a single identity provider across their workforce, such as:
- Microsoft Entra ID
- Okta
- Google Workspace
Single Tenant SSO or Password
Single Tenant SSO or Password provides a hybrid authentication model, allowing different groups of users to authenticate using different methods.
For example:
- Office-based employees with corporate accounts can authenticate through the organisation's SSO provider.
- Frontline workers, contractors, or other users who are not included in the organisation's identity directory can sign in using a personal email address and password.
This option is ideal for organisations with a mixed workforce where not all users are managed through the same identity provider.
Multi Tenant SSO or Password
Multi Tenant SSO or Password supports authentication through multiple SSO identity providers while continuing to allow password-based authentication.
This configuration is designed for organisations that:
- Support multiple business units or subsidiaries with different identity providers.
- Serve multiple customer organisations, each with its own SSO configuration.
- Require a combination of SSO and traditional password authentication across different user groups.
Additional Resources
For detailed configuration instructions, including provider-specific setup guidance, refer to the Technical Resources section of the Help Center.
Step-by-step articles are available for each authentication mode and supported identity provider to assist with implementation and configuration.