Two-step sign-in and company SSO
Add a code from an authenticator app to your sign-in, require it for a team, and sign in through your company's identity provider.
These options appear when your account uses the shared Programmable sign-in.
Two-step sign-in for you
If you see Two-step sign-in in Settings › Account, choose Set up to add a code from an authenticator app to your sign-in, so a stolen password isn't enough. Once it's on, the button reads Manage. It applies to every Programmable app you use.
Require it for a team
In a team workspace, the owner can turn on Require two-step sign-in for members under Settings › Team › Sign-in security. Members without it are asked to set it up when they sign in, and can't open the workspace until they have. The page shows how many members haven't set it up yet.
Sign in with your company's SSO
Under Sign-in security, the owner can enter the company's email domain and choose Save domain. We then get in touch to connect your identity provider, such as Okta, Microsoft Entra ID or Google Workspace (any SAML or OpenID Connect provider), and switch it on for that domain.
Once it is active, people with an address at that domain sign in through your identity provider. Remove takes the domain off.