Secure your app
By the end of this page you will know where authentication for your generated app is configured.
Prerequisites
- An app workspace, with Auth enabled at creation (Create an app).
Authentication
Whether your app requires login is set once, when you create it — using the Auth chip on the prompt composer (see Create an app).
Everything else about how that login behaves — self-registration, MFA, session timeout, the email server used for auth emails, SSO providers, and login page branding (logo, colors, custom CSS) — is configured project-wide, not per app, from the project’s Security page → Auth Settings tab. This applies to every app in the project that has Auth enabled, not just this one.
See Auth Settings for the full breakdown of what’s configurable there.
Common issues
- Looking for a per-app authentication toggle in the workspace — there isn’t one; Auth is set at creation time via the composer’s Auth chip, and everything else lives at Security → Auth Settings.
- Login looks different than expected — check Security → Auth Settings → Login Page Branding; those settings apply to every app in the project, not just this one.