Availability: All plans
Summary
An account can be set to require single sign-on. While that is on, everyone in the account signs in with Google or Microsoft, and password sign-in is blocked. The setting is applied by BoundaryLogic on the account owner’s request; there is no toggle in the product.
Usage notes
Turning it on
Ask BoundaryLogic support to require single sign-on for your account. Support sets it on the account record. Nothing in the Team, Subscription, or Billing pages exposes the setting, so an owner or admin looking for it will not find one.
What members see
A member whose current session signed in with a password loses the app and gets the “Single sign-on required” screen instead. It explains that the email and password session is not allowed, tells them to sign out and sign back in with a Google or Microsoft work account, and points them at their administrator for help. The only button is Sign out, which returns them to the sign-in card.
Signing back in with Continue with Google or Continue with Microsoft gets them back in. Sessions that started from an emailed sign-in link also pass.
The requirement follows the person, not the page. It applies everywhere in Trace, and it applies if any team the user belongs to requires single sign-on, so someone in two teams is held to the strictest of them.
What changes for new members
The invitation wizard for that team drops the password step entirely. An invitee sees only Sign up with Google and Sign up with Microsoft. Accept a team invite covers the rest of that wizard.
What changes on the account page
The Password row disappears from the Security card on Account settings. Only the sign-in method row remains, because there is no password to change.
Options
| Sign-in method | Allowed |
|---|---|
| Yes | |
| Microsoft | Yes |
| Emailed sign-in link | Yes |
| Email and password | No |
If a member already had a password account
Signing in with Google or Microsoft on an email that already has a password opens Link Your Accounts. Entering the existing password once links the two identities, after which that person signs in with the provider from then on.
Related
- Sign-in options, for every way into Trace
- Accept a team invite, for the invitation wizard under single sign-on
- Account settings, for the Security card
- Invite and roles, for managing who is in the team