> ## Documentation Index
> Fetch the complete documentation index at: https://docs.omni.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication settings

> Configure general authentication behavior, SAML, and OIDC for your Omni organization.

<Note>
  **Organization Admin** permissions are required to access and modify authentication settings.
</Note>

The **Settings > Authentication** page contains settings that control how users sign in to your Omni organization. From here, you can manage general authentication behavior and configure SAML or OIDC.

## Default sign-in methods

The **Default sign-in methods** section controls which authentication methods are available to users by default.

<Note>
  At least one [external sign-in method](#external-sign-in) must be configured before any default methods can be disabled.
</Note>

### Google

When enabled, users can use their Google Workspace account to log in. **Note**: This is a different sign-in method than [Google Workspace SAML](/administration/authentication/google-workspace), which requires additional setup.

### Email

When enabled, users can enter their email address and receive a link to log in.

#### Admin fallback

When **Email** is disabled as a sign-in method, an additional **Admin fallback** setting will display. By default, Organization Admins can sign in using email link authentication as a fallback in case other authentication methods are broken or unavailable. This ensures admins can always access Omni to troubleshoot identity provider issues.

When disabled, this fallback is removed and Organization Admins must sign in using the configured SAML or OIDC provider.

<Warning>
  Disabling the email link fallback can lock administrators out of Omni if your identity provider becomes unavailable or misconfigured. Make sure you have a recovery plan before disabling this setting.
</Warning>

<h2 id="external-sign-in">
  External sign-in methods
</h2>

The **External sign-in methods** section allows you to enable authentication through your organization's single sign-on.

### SAML

When enabled, Security Assertion Markup Language (SAML) can be used as an authentication method. Configuring your Identity Provider (IdP) is required before users can successfully use this method to sign in to Omni.

For step-by-step setup instructions, refer to the guide for your identity provider:

* [Google Workspace](/administration/authentication/google-workspace)
* [Microsoft Entra (Azure AD)](/administration/authentication/entra/saml)
* [Okta](/administration/authentication/okta/saml)
* [Rippling](/administration/authentication/rippling/saml)

### OIDC

When enabled, OpenID Connect (OIDC) can be used as an authentication method. Configuring your OIDC Identity Provider is required before users can successfully use this method to sign in to Omni.

For setup instructions, refer to the [OIDC configuration guide](/administration/authentication/oidc).

## Modifying authentication settings

Click the toggle next to a setting to enable or disable it. When finished, click **Save** to apply the changes.

## Need help?

If you run into issues during setup, check the [SSO troubleshooting guide](/administration/authentication/troubleshooting) for common problems and solutions.