Signing In and SSO
SSO lets your employees sign in to Glow through your corporate identity provider, while workspace roles and permissions are managed in Members and invites.
- Use it to
- Sign in through your corporate identity provider or enable TOTP two-factor authentication on a password-based account
- Find it
- Top-right profile menu → Password and security (Your account → Security)
- Limits
- Identity provider MFA applies to SSO sign-ins · Personal TOTP 2FA applies per password-based account
- Instead
- Members & Invitations (to invite teammates and assign workspace roles after SSO setup)
- Employees authenticate through your corporate identity provider.
- Your identity provider's MFA policy governs sign-ins through that provider.
- Contact your account team or support to review compatibility, provisioning, and allowed sign-in paths.
- Each member enables TOTP two-factor authentication on their own password-based Glow account.
- Configured in Your account → Security with Google Authenticator, Authy, or 1Password.
- Existing Glow passwords remain usable unless your sign-in policy restricts them.
Single Sign-On (SSO)
Contact your account team or support to review SSO setup for your identity provider. Confirm compatibility, MFA, provisioning, and offboarding requirements before rollout.
Managing roles
Members are invited and assigned roles under Members & Invitations. Coordinate identity-provider provisioning, sign-in policies, and offboarding workflows with your account team during SSO setup.
Two-Factor Authentication (2FA)
You can add a second factor to any password-based Glow account. Open your profile menu, choose Password and security, and select Turn on two-factor. Follow the personal 2FA setup with a TOTP authenticator app.
Workspace 2FA Enforcement
Review all allowed sign-in paths. An identity provider’s MFA policy applies only to sign-ins through that provider. Personal 2FA is enabled per password-based account. Review existing Glow passwords, allowed sign-in methods, and offboarding steps with your account team.
- Run
- Open Your account → Security and enable two-factor authentication, or test sign-in through your identity provider
- You should see
- Password sign-ins prompt for a 6-digit TOTP code, and SSO sign-ins enforce your identity provider's MFA policy.
What’s Next?
- Assign roles to members who sign in through SSO in Members & Invitations.
- Review the controls and data-handling behind these features in Security & Compliance.