Account security
Your organization's Security settings hold two-factor authentication, single sign-on, active sessions and the audit log. Find them under Settings, in your organization.
| Feature | Available on |
|---|---|
| Two-factor for your own account | Every plan |
| Active sessions | Every plan |
| Requiring two-factor for everyone | Enterprise |
| Single sign-on | Enterprise |
| Audit log | Enterprise |
Two-factor authentication
Two-factor adds a code from an authenticator app to your sign-in.
- Scan the QR code
Scan it with your authenticator app. If you can't, choose Can't scan it? to see a setup key you can type in.
- Enter the code
Type the 6-digit code the app shows.
- Save your backup codes
Each backup code works once. Keep them somewhere you can reach without your phone.
Single sign-on
Let your team sign in through your identity provider using SAML 2.0. There are setup guides for Okta, Azure AD, Google Workspace and OneLogin.
- Add Octri to your provider
Copy the Entity ID and ACS URL into your identity provider, or give it the SP metadata file.
- Add your provider to Octri
Enter its IdP entity ID, SSO URL and X.509 signing certificate.
- Verify your email domains
List your domains, one per line, and add the DNS records shown. Once verified, members with those domains see your provider on the sign-in page.
- Test and turn it on
Press Test configuration. When everything checks out, turn on Turn on SSO.
Options
| Option | What it does |
|---|---|
| Require SSO | Makes SSO the way members sign in. Turn SSO on first |
| Create accounts on first sign-in | Adds new people the first time they sign in |
| Role for new members | Viewer, Member or Admin |
| Attribute mapping | The names your provider uses for email, first name and last name. The defaults suit most providers |
To protect your docs site rather than the dashboard, see access control.
Active sessions
Active sessions lists the devices signed in to your account, and marks This device. Sign out of anything you don't recognize.
Audit log
The audit log records every action taken in the organization, and keeps it for a year. Each entry shows the time, user, action, resource and outcome.
Filter by user, action type and date, and choose Export CSV to take a copy.
Your account
Your name, profile picture and password are in Account, from the avatar menu. Changing your password signs out your other devices. If you signed up with Google or GitHub, you can set a password from there too.