Guides
Choose how your people sign in
Allow email codes or SSO, and require SSO for your company's email domains.
How-to guide2 min read
Open your organisation and choose the Sign-in tab.
Share your sign-in address
At the top of the Sign-in tab, Your sign-in address shows a link just for your organisation, such as https://app.bifrostorbit.com/signin/acme-outdoors. Share it with your people or put it on your intranet. It opens a sign-in page that:
- names your organisation,
- offers only the ways you allow below,
- sends Sign in with Microsoft straight to your own Microsoft sign-in, so nobody types their email,
- offers Sign in with Google when Google SSO is on.
The address uses your organisation's address from Settings, so it never changes.
Ways to sign in
Switch on the ways your members may sign in:
| Way | For |
|---|---|
| Email code | Anyone. A six-digit code is emailed each time. |
| Microsoft SSO | People with a work account in your Microsoft tenant. See Connect Microsoft SSO. |
| Google SSO | People with a Google Workspace account on your domains. Personal Google accounts, such as Gmail, are refused. See Connect Google SSO. |
A new organisation starts with email codes only. Allow both email codes and SSO while your people move over, then require SSO for your domain.
A linked organisation has no sign-in settings of its own. Its Sign-in page shows which organisation it shares them with; change them there.
Require SSO for your domains
Once Microsoft or Google SSO is on, Require SSO for your domains appears.
- Add your email domain, such as
example.com. - Choose which SSO it must use.
- Choose Save changes.
Everyone with an address on that domain can then only sign in with that SSO, so nobody can get round it with an email code. A domain can be required by only one organisation.
Was this page helpful?