Auth Settings
Auth Settings is where you configure authentication for every app in a project, in one place — sign-in policy, session length, email verification, the login page’s look, and SSO.
This is different from the Auth chip you toggle when creating an app — that chip only turns login on or off for one app. Everything you configure here is project-level: it applies to every authenticated app and agent in the project, not just one.
Where it lives
Open Security in the project sidebar, then click the Auth Settings tab.
- Editing requires the Owner or Admin role — everyone else sees the same controls, disabled rather than hidden.
Auth Settings itself is a two-pane layout: a left-hand list of six sections, and a content pane on the right showing whichever section is selected.
Sections
- Authentication → — Self-registration and MFA
- Session → — Idle session timeout
- Email Verification → — Require verification, pick an SMTP config
- Login Page Branding → — Identity, colors, hero panel, legal & footer
- Custom CSS → — Override the login page’s styling directly
- Single Sign-On (SSO) → — Google Workspace and Azure AD / Entra ID
Saving changes
Edits aren’t sent to the server as you type — they’re tracked as pending changes until you explicitly save:
- A sticky bar reading “You have unsaved changes” appears with Discard and Save buttons.
- Each section in the sidebar shows a small dot if it has an unsaved edit, so you can tell which sections you’ve touched.
- Below the section list, Open Web Preview and Open Mobile Preview links are always available — not just on the branding section — so you can check the live result while editing Custom CSS too.
SSO is the one exception: adding, editing, or removing a provider saves immediately rather than waiting for you to click Save, so a provider you just added isn’t lost on refresh.
Related
- Secure your app — where Auth is turned on for one generated app
- Roles & permissions — who can access Auth Settings and what each role can do