Orb’s system supports a handful of login and authentication methods to help ensure the security of your Orb account. These methods include: Account Admins are able to make changes to the authentication configuration by visiting the “Security” tab under “Settings.” overview.png
Multiple login methods may be enabled at one time. This can be useful for cases like system migrations, multiple auth systems, and more.

​
Inviting users

Account Admins can invite new users to join your Orb account by visiting the “Users” tab under “Settings.” In order to login to Orb, users are required to have been invited by an Account Admin. add-user.png

​
User roles

Orb supports three user roles, “Admin”, “Editor”, and “Viewer”:
RoleDescriptionKey restrictions
AdminFull control, including managing user access and permissions, setting up integrations and exports, and viewing audit logs.None
EditorCreate, update, and manage core billing objects (plans, subscriptions, metrics, etc.); access simulation and reporting tools; monitor and re-sync integrations (Admins retain setup control).Set up account-wide settings, integrations, or exports; lock/unlock accounting periods; manage users.
ViewerRead-only access to all core billing objects, simulation and reporting tools, and settings.Create, edit, or delete anything; manage users.

​
Changing allowed authentication methods

By default, your Orb account will start with password and Google-based login enabled.
You can turn on and off all available login methods within the “Security” page. This can be done by clicking the button or dropdown on the associated login method. dropdown.png
Set the login method to required if you want all users to login with that method. This option is available on the login method’s dropdown.

​
Google and Microsoft login

You can use your existing Google or Microsoft account to login to Orb. Login domains can be restricted to only allow login from those specified domains. By default, specifying no domain allows for any domain to login. Note that users will still need to have been invited (see above) to login. restrict-domains.png

​
SAML SSO

Login via SAML SSO is not supported by default on all plans. Please contact your Orb representative if you have any questions.
Orb supports logging in via SAML SSO. Connections can be created, edited, and deleted all within the “Security” page by an account admin. overview-with-sso.png To create a connection, use the ”+ Add SSO Connection” button. create-sso-connection.png This connection will be added to the existing connection list in a disabled state. Hitting “Configure” will present you with the following screen to setup your connection. edit-sso-connection.png You can also use the “Edit” button on an existing SSO connection to edit its values. SAML SSO connections requires a couple of values from the attribute mapping. These values are:
  1. Email
  2. Name in either of the following forms:
    • Full name
    • First name and last name

​
Login flow

You can login to your Orb app by visiting our login page. The flow to login is only a few, simple steps that ensures the security of the Orb product. You’ll first be prompted to enter your email before continuing. Orb uses your email to determine which organizations to select for login. email-enty.png If there are multiple Orb organizations associated with your email, you’ll have to select the relevant organization you wish to login to. If there is only one organization associated with your email, you will not see this page.
Multiple Orb organizations are not included with all Orb billing plans by default. Please reach out to your Orb representative if you have any questions.
organization-select.png Afterwards, you’ll be prompted to login with your login method of choice. If your organization has been configured with only one login method and that method is SAML SSO or OAuth, you’ll be directly routed to the applicable login page. login-screen.png

​
Switching organizations

As mentioned above, some customers may have access to multiple organizations. When this is the case, Orb’s portal allows for easy switching between organizations by accessing the information menu in the bottom left of the Orb UI. organization-switcher.png