Skip to main content
Organization Admin permissions are required to access and modify authentication settings.
The Settings > Authentication page contains settings that control how users sign in to your Omni organization. From here, you can manage general authentication behavior and configure SAML or OIDC.

​
Default sign-in methods

The Default sign-in methods section controls which authentication methods are available to users by default.
At least one external sign-in method must be configured before any default methods can be disabled.

​
Google

When enabled, users can use their Google Workspace account to log in. Note: This is a different sign-in method than Google Workspace SAML, which requires additional setup.

​
Email

When enabled, users can enter their email address and receive a link to log in. If SSO is required and Email sign in is disabled, you can set independent exceptions to allow specific users sign in with an email link anyway:
  • Standard users - Only the users you turn on from their user settings. Turn this on for an individual member from their user settings page.
  • External users - All external users.
  • Organization Admins - All Organization Admins; a fallback in case SAML or OIDC is broken. By default, Organization Admins can sign in using email link authentication as a fallback in case other authentication methods are unavailable. This ensures admins can always access Omni to troubleshoot identity provider issues. When disabled, Organization Admins must sign in using the configured SAML or OIDC provider.
    Disabling the Organization Admins exception can lock administrators out of Omni if your identity provider becomes unavailable or misconfigured. Make sure you have a recovery plan before disabling this setting.

​
External sign-in methods

The External sign-in methods section allows you to enable authentication through your organization’s single sign-on.

​
SAML

When enabled, Security Assertion Markup Language (SAML) can be used as an authentication method. Configuring your Identity Provider (IdP) is required before users can successfully use this method to sign in to Omni. For step-by-step setup instructions, refer to the guide for your identity provider:

​
OIDC

When enabled, OpenID Connect (OIDC) can be used as an authentication method. Configuring your OIDC Identity Provider is required before users can successfully use this method to sign in to Omni. For setup instructions, refer to the OIDC configuration guide.

​
Modifying authentication settings

Click the toggle next to a setting to enable or disable it. When finished, click Save to apply the changes.

​
Need help?

If you run into issues during setup, check the SSO troubleshooting guide for common problems and solutions.