Skip to main content

Enable secure logins with 2FA, SSO and allowed email domains

SSO, 2FA, Domain, allowed, enable, security, login, MFA, password

Written by David Whitner

Account administrators can choose how their teams login to CoverageBook. You can select:

When you enable any of the security features below, existing teammates will have 14 days to setup 2FA, SSO, or use an allowed email domain before they are required to.

Head to the main settings - team page - security to access these features. You'll need to be an account admin to enable them.

Enable two-factor authentication (2FA) for all users

Tick the checkbox and select 'save'. We'll email yoru team to let them know they need to setup 2FA. You can use an authenticator app like Google Authenticator or Authy.

Once setup we'll give you 5 recovery codes. Keep these save. You can sue one code per login if you can't access your authenticator app.

If you need help resetting your 2FA, contact an admin on your team for assistance.

For more information on setting up and managing 2FA for your team, we have a full guide here.

Require users to sign in via Google or Microsoft (SSO)

Check the require SSO box and click 'save' to setup only logins from Google or Microsoft. Any users signing in with a password will have 14 days to change to SSO, and won't be able to login after till they've set it up.

Check out our full guide on this here.

Setup allowed email domains for your team

Admins can also restrict which email domains are allowed to be invited into your account. Type in your allowed domains and anyone on your team with a different email domain will have 14 days to be invited into the team with an allowed domain.

Check out our guide on this here.

Did this answer your question?