This is a follow-up to #32693, which missed a bunch of places due to varying ways of typing Azure AD. (Azure AD, Azure Active Directory etc.) In the diff there's an apparent inconsistency with renaming, in some places renaming to just "Microsoft Entra ID" and in others "Microsoft Entra ID (AzureAD)". The idea is to add (AzureAD) in ordinary documentation, as it can help clarity since many people still think of this as AzureAD, while sticking with brevity and cleanliness of just using the official name in marketing focused material.
2.7 KiB
Configure authentication methods
{!owner-only.md!}
You can choose which authentication methods to enable for users to log in to your organization. The following options are available on all plans:
- Email and password
- Social authentication: Google, GitHub, GitLab, Apple
The following options are available for organizations on Zulip Cloud Standard, Zulip Cloud Plus, and all self-hosted Zulip servers:
- Oauth2 with Microsoft Entra ID (AzureAD)
The following options are available for organizations on Zulip Cloud Plus, and all self-hosted Zulip servers:
- SAML authentication, including Okta, OneLogin, Entra ID (AzureAD), Keycloak, Auth0
- SCIM provisioning
The following authentication and identity management options are available for all self-hosted servers. If you are interested in one of these options for a Zulip Cloud organization, contact support@zulip.com to inquire.
- AD/LDAP user sync
- AD/LDAP group sync
- OpenID Connect
- Custom authentication options with python-social-auth
Configure authentication methods
!!! warn ""
For self-hosted organizations, some authentication options require
that you first [configure your
server](https://zulip.readthedocs.io/en/stable/production/authentication-methods.html)
to support the option.
!!! tip ""
Before disabling an authentication method, test that you can
successfully log in with one of the remaining authentication methods.
The [`change_auth_backends` management
command](https://zulip.readthedocs.io/en/stable/production/management-commands.html)
can help if you accidentally lock out all administrators.
{start_tabs}
{settings_tab|auth-methods}
-
To use SAML authentication or SCIM provisioning, Zulip Cloud organizations must upgrade to Zulip Cloud Plus, and contact support@zulip.com to enable these methods.
-
Toggle the checkboxes next to the available login options.
{!save-changes.md!}
{end_tabs}
Related articles
- Configuring authentication methods for server administrators (self-hosted only)
- SAML authentication
- SCIM provisioning