Skip to main content

Login and Authentication

Orb's system supports a handful of login and authentication methods to help ensure the security of your Orb account.

These methods include:

Account Admins are able to make changes to the authentication configuration by visiting the "Security" tab under "Settings."

overview.png

info

Multiple login methods may be enabled at one time. This can be useful for cases like system migrations, multiple auth systems, and more.

Inviting Users

Account Admins can invite new users to join your Orb account by visiting the "Users" tab under "Settings." In order to login to Orb, users are required to have been invited by an Account Admin.

add-user.png

Changing Allowed Authentication Methods

info

By default, your Orb account will start with password and Google-based login enabled.

You can turn on and off all available login methods within the "Security" page. This can be done by clicking the button or dropdown on the associated login method.

dropdown.png

tip

Set the login method to required if you want all users to login with that method. This option is available on the login method's dropdown.

Google and Microsoft Login

You can use your existing Google or Microsoft account to login to Orb.

Login domains can be restricted to only allow login from those specified domains. By default, specifying no domain allows for any domain to login. Note that users will still need to have been invited (see above) to login.

restrict-domains.png

SAML SSO

info

Login via SAML SSO is not supported by default on all plans. Please contact your Orb respentative if you have any questions.

Orb supports logging in via SAML SSO. Connections can be created, edited, and deleted all within the "Security" page by an account admin.

overview-with-sso.png

To create a connection, use the "+ Add SSO Connection" button.

create-sso-connection.png

This connetion will be added to the existing connection list in a disabled state. Hitting "Configure" will present you with the following screen to setup your connection.

edit-sso-connection.png

You can also use the "Edit" button on an existing SSO connection to edit its values.

SAML SSO connections requires a couple of values from the attribute mapping. These values are:

  1. Email
  2. Name in either of the following forms:
    • Full name
    • First name and last name