2017-12-29 03:14:34 +01:00
|
|
|
# Configure authentication methods
|
|
|
|
|
|
2020-06-11 16:24:15 +02:00
|
|
|
{!owner-only.md!}
|
2017-12-29 03:14:34 +01:00
|
|
|
|
2024-03-18 19:09:54 +01:00
|
|
|
You can choose which authentication methods to enable for users to log in to
|
|
|
|
|
your organization. The following options are available on all
|
|
|
|
|
[plans](https://zulip.com/plans/):
|
2017-12-29 03:14:34 +01:00
|
|
|
|
2024-03-18 19:09:54 +01:00
|
|
|
- Email and password
|
|
|
|
|
- Social authentication: Google, GitHub, GitLab, Apple
|
2017-12-29 03:14:34 +01:00
|
|
|
|
2024-03-18 19:09:54 +01:00
|
|
|
The following options are available for organizations on Zulip Cloud Standard,
|
|
|
|
|
Zulip Cloud Plus, and all self-hosted Zulip servers:
|
|
|
|
|
|
|
|
|
|
- Oauth2 with Azure Active Directory
|
|
|
|
|
|
|
|
|
|
The following options are available for organizations on Zulip Cloud Plus, and all self-hosted Zulip servers:
|
|
|
|
|
|
|
|
|
|
- [SAML authentication](/help/saml-authentication), including Okta, OneLogin, AzureAD, Keycloak, Auth0
|
|
|
|
|
- [SCIM provisioning](/help/scim)
|
|
|
|
|
|
|
|
|
|
The following authentication and identity management options are available for
|
|
|
|
|
all self-hosted servers. If you are interested in one of these options for a
|
|
|
|
|
Zulip Cloud organization, contact [support@zulip.com](mailto:support@zulip.com)
|
|
|
|
|
to inquire.
|
|
|
|
|
|
|
|
|
|
- [AD/LDAP user
|
|
|
|
|
sync](https://zulip.readthedocs.io/en/stable/production/authentication-methods.html#ldap-including-active-directory)
|
|
|
|
|
- [AD/LDAP group
|
|
|
|
|
sync](https://zulip.readthedocs.io/en/stable/production/authentication-methods.html#ldap-including-active-directory)
|
|
|
|
|
- [OpenID
|
|
|
|
|
Connect](https://zulip.readthedocs.io/en/stable/production/authentication-methods.html#openid-connect)
|
|
|
|
|
- [Custom authentication
|
|
|
|
|
options](https://python-social-auth.readthedocs.io/en/latest/backends/index.html#social-backends)
|
|
|
|
|
with python-social-auth
|
2017-12-29 03:14:34 +01:00
|
|
|
|
2019-04-03 01:12:26 +02:00
|
|
|
### Configure authentication methods
|
|
|
|
|
|
2024-03-18 19:09:54 +01:00
|
|
|
!!! warn ""
|
|
|
|
|
|
|
|
|
|
For self-hosted organizations, some authentication options require
|
|
|
|
|
that you first [configure your
|
|
|
|
|
server](https://zulip.readthedocs.io/en/stable/production/authentication-methods.html)
|
|
|
|
|
to support the option.
|
|
|
|
|
|
2024-08-14 22:32:24 +02:00
|
|
|
!!! tip ""
|
|
|
|
|
|
|
|
|
|
Before disabling an authentication method, test that you can
|
|
|
|
|
successfully log in with one of the remaining authentication methods.
|
|
|
|
|
The [`change_auth_backends` management
|
|
|
|
|
command](https://zulip.readthedocs.io/en/stable/production/management-commands.html)
|
|
|
|
|
can help if you accidentally lock out all administrators.
|
|
|
|
|
|
2019-04-03 01:12:26 +02:00
|
|
|
{start_tabs}
|
|
|
|
|
|
2018-07-18 17:43:23 +02:00
|
|
|
{settings_tab|auth-methods}
|
2017-12-29 03:14:34 +01:00
|
|
|
|
2024-03-18 19:09:54 +01:00
|
|
|
1. To use SAML authentication or SCIM provisioning, Zulip Cloud organizations
|
|
|
|
|
must upgrade to [Zulip Cloud Plus](https://zulip.com/plans/), and contact
|
|
|
|
|
[support@zulip.com](mailto:support@zulip.com) to enable these methods.
|
|
|
|
|
|
|
|
|
|
1. Toggle the checkboxes next to the available login options.
|
2017-12-29 03:14:34 +01:00
|
|
|
|
2018-07-18 17:43:23 +02:00
|
|
|
{!save-changes.md!}
|
2017-12-29 03:14:34 +01:00
|
|
|
|
2019-04-03 01:12:26 +02:00
|
|
|
{end_tabs}
|
|
|
|
|
|
2018-07-18 17:43:23 +02:00
|
|
|
## Related articles
|
2017-12-29 03:14:34 +01:00
|
|
|
|
2023-03-23 05:32:39 +01:00
|
|
|
* [Configuring authentication methods](https://zulip.readthedocs.io/en/stable/production/authentication-methods.html)
|
2018-07-18 17:43:23 +02:00
|
|
|
for server administrators (self-hosted only)
|
2024-03-18 19:09:54 +01:00
|
|
|
* [SAML authentication](/help/saml-authentication)
|
|
|
|
|
* [SCIM provisioning](/help/scim)
|
