2.4 KiB
Configure authentication methods
{!owner-only.md!}
You can choose which authentication methods to enable for users to log in to your organization. The following options are available on all plans:
- Email and password
- Social authentication: Google, GitHub, GitLab, Apple
The following options are available for organizations on Zulip Cloud Standard, Zulip Cloud Plus, and all self-hosted Zulip servers:
- Oauth2 with Azure Active Directory
The following options are available for organizations on Zulip Cloud Plus, and all self-hosted Zulip servers:
- SAML authentication, including Okta, OneLogin, AzureAD, Keycloak, Auth0
- SCIM provisioning
The following authentication and identity management options are available for all self-hosted servers. If you are interested in one of these options for a Zulip Cloud organization, contact support@zulip.com to inquire.
- AD/LDAP user sync
- AD/LDAP group sync
- OpenID Connect
- Custom authentication options with python-social-auth
Configure authentication methods
!!! warn ""
For self-hosted organizations, some authentication options require
that you first [configure your
server](https://zulip.readthedocs.io/en/stable/production/authentication-methods.html)
to support the option.
{start_tabs}
{settings_tab|auth-methods}
-
To use SAML authentication or SCIM provisioning, Zulip Cloud organizations must upgrade to Zulip Cloud Plus, and contact support@zulip.com to enable these methods.
-
Toggle the checkboxes next to the available login options.
{!save-changes.md!}
{end_tabs}
Related articles
- Configuring authentication methods for server administrators (self-hosted only)
- SAML authentication
- SCIM provisioning