AppsSecurity & Compliance

Security & Compliance · topic

Identity and sign-in

Members sign in through your Google Workspace or Microsoft Entra ID with SSO, add two-step verification, and stay signed in only as long as your company allows.

How people sign in to Autessa: SSO with Google or Microsoft, two-step verification, sign-in methods, session limits and sign-in for the apps you publish.

Start free
Company · Single Sign-OnManaged in the web appSample

Identity provider

○ Google● Microsoft Entra ID
Role for new membersUser (default)

Domains

northwind.exampleVerifiedRequire SSO to sign in
nw-labs.examplePending verificationVerify first
Add the DNS record shown for nw-labs.example, then click Verify.

How it fits together

How does identity and sign-in work in Autessa?

Identity in Autessa starts with who you are: your company Google Workspace or Microsoft Entra ID account through single sign-on, or your own sign-in with a second step. It continues with how long you stay signed in, which each company decides, and extends to the outside people who use the apps you publish.

IN THIS AREA

  • Single sign-on with verified domains and Require SSO
  • Two-step verification with recovery codes
  • Company-wide inactivity sign-out and CLI limits
  • Hosting modes for every app you publish

In this area

Every identity and sign-in feature

01Single sign-on (SSO)Autessa includes single sign-on: pick Google or Microsoft Entra ID, verify your email domain with a DNS record, and turn on Require SSO so everyone with that address signs in through your provider.→02Two-step verificationAutessa includes two-step verification: after the password, members enter a 6-digit code from an authenticator app or from email, with single-use recovery codes as a backup.→03Sign-in methods and passwordsMembers sign in to Autessa with Google, Microsoft, Apple, a one-time emailed code or a password of at least 12 characters, and a password change signs out their other devices.→04Session controlsAdmins set one sign-out-after-inactivity length for the company, cap how long CLI sign-ins last, and decide whether Drive can be used from computers, while sign-in stays tied to the network it began on.→05Sign-in for the apps you publishEvery app you publish picks a hosting mode, from team-only to Custom Auth accounts with email, Google or Microsoft, and row rules can scope each visitor to their own records.→

Other areas

The rest of Autessa Security & Compliance

FAQ

Identity and sign-in: questions

Which identity providers does Autessa SSO support?

Google Workspace and Microsoft Entra ID. You choose one provider for your company.

Which authenticator apps work with Autessa?

Any standard authenticator app that reads a QR code or a setup key, such as Google Authenticator, Microsoft Authenticator or 1Password.

Can I sign in to Autessa without a password?

Yes. Continue with Google, Microsoft or Apple, or ask for a one-time code by email.

How long do Autessa sessions last?

By default, members are signed out after 1 hour without activity. Admins can choose anything from 15 minutes to 30 days for the whole company.

Can people outside my company use an Autessa app?

Yes. Publish it with Public, Access Code, Custom Auth or Personal access links hosting. Visitors do not become company members.

Identity and sign-in, built in

Members sign in through your Google Workspace or Microsoft Entra ID with SSO, add two-step verification, and stay signed in only as long as your company allows.

Start free

Reports, policies and questionnaires live on the Autessa Trust Center.

100% customizable, code and all

Make Autessa Security & Compliance fully your own.

Use it out of the box, then change anything. Ask Autobot, Autessa’s AI builder, for a new field, screen, report, workflow or agent and it builds it into your copy of the app. Or open the code and edit it yourself. Nothing is locked: the app, its data and its code are yours.

Start free and make it yours