Sign-in & security

In Sign-in & security under account settings, you can manage your email address, sign-in methods, and multi-factor authentication.

These settings are scoped to your account and shared across every workspace you belong to.

Email

You can check your current email address and change email.

Sign-in methods

You can use multiple sign-in methods together. You can't remove the last one.

Method	Description
Password	Authentication with an email address and password. You can change password or remove password (if you have another sign-in method). If it isn't set up yet, you can add it
Sign in with SSO	Sign-in through your organization's IdP (see Signing in with SSO). Shown when your organization has turned on SAML SSO for the domain of your email address. You can't set it up or remove it on this screen
Sign in with Google	Single sign-on with a Google account. You can connect or disconnect it

Only password and Google count toward the last sign-in method. Sign in with SSO doesn't count.

If SSO is available for your email address and you haven't set a password, the password row shows Not set, and you can't add a password on this screen.

Multi-factor authentication

Method	Description
Phone number (SMS)	Authenticates with an SMS sent to a registered phone number. You can add phone number / remove
Authenticator app	Authenticates with an authenticator app such as Google Authenticator or Microsoft Authenticator. You can add authenticator app / remove

If the workspace enforces MFA for Password sign-in, or applies IP access control, see MFA control and IP access control.

Signing in with SSO

If your organization has turned on SAML SSO for the domain of your email address, you can sign in through your organization's IdP.

1. On the sign-in page, enter your email address, then select Continue.
2. Select Sign in with SSO.
3. In the window that opens, sign in to your IdP.

To sign in with a password instead, select Sign in with password. To sign in with SSO, allow pop-ups for Codatum in your browser.

On the sign-up page, entering an email address on the same domain shows Sign up with SSO and Sign up with email (see Sign-up).

SSO sign-in specifications

• If you don't have a Codatum account, you register your profile after your first SSO sign-in, and your account is created.
• If an account with the same email address exists, you sign in to that account. Any password or Google connection you've set up keeps working.
• If an existing account's email address hasn't been verified, its password and Google connection are removed, and you sign in with SSO.
• Signing in with SSO doesn't ask for the multi-factor authentication registered in Codatum. It also isn't subject to the workspace's MFA control. Multi-factor authentication follows your IdP's settings.
• An SSO sign-in expires seven days after your last SSO sign-in. When it expires, you're signed out, and the sign-in page shows "Your SSO session has ended. Sign in again." Sign in with SSO again.
• If your organization disables the IdP, or stops or switches SSO for the domain, browsers signed in with SSO are also signed out.
• When you're asked to confirm your identity, such as to change your email address or password, you can use Continue with SSO. Sign in to your IdP as the same user who is signed in to Codatum.

When you can't sign in with SSO

1. If "The sign-in window was blocked" appears, allow pop-ups for Codatum in your browser, then try again.
2. If "Your IdP didn't send an email address" appears, ask your organization's administrator to set the NameID in the IdP to the email address.
3. If a message such as "SSO isn't available for this email address" appears, contact your organization's administrator.

If you've set up a password or Google connection, you can also sign in with Sign in with password or Sign in with Google.