Identity and access
Local accounts with two-factor
Built-in accounts with two-factor for labs, small teams and a break-glass administrator.
What it is
Built-in email and password accounts with optional TOTP two-factor and recovery codes. The first administrator can be created in the browser on a fresh install.
Why you want it
Labs and small teams can start without an IdP, and a local administrator is the break-glass when the IdP is down.
How it works
- Passwords bcrypt-hashed; 10 failed attempts lock the account for 15 minutes
- TOTP with one-time recovery codes; the pending second step is stored in the database so it works across replicas
- Administrators can reset a password or two-factor from People
- Every sign-in event is audited and counts toward seats exactly like SSO
See it on your own network.
The Community edition is free for up to 25 people. The 30-day Business trial unlocks every Business feature.