Manage authentication

Requirements
Authentication methods
Manage authentication method and options
Admin-initiated password reset
Bulk password reset
Company domain signup
Related resources

Requirements

Admin privileges in your Sigma organization; see user account types.

Authentication methods

Password: Sigma prompts new organization members to create a unique password for their Sigma account and login that is at least 8 characters long and not a commonly-used or similar password. To change authentication from password to SSO or OAuth, user emails must map exactly in order for the user to maintain their account.
SAML: Sigma authenticates organization member accounts through the Single Sign On (SSO) protocol you provide. See SSO with SAML.
SAML or Password: Organization members authenticate with either SSO or a unique password.
SAML and Password: Organization members authenticate with SSO and a unique password. The primary use case for this is to ensure the admin isn't logged out while configuring SAML. Once the configuration is complete, the org should use SAML.
OAuth: Sigma authenticates organization member accounts through OAuth Single Sign On (SSO). This option supports OAuth with Snowflake.
OAuth or Password: Sigma authenticates organization member accounts through OAuth Single SignOn (SSO) or a unique password. This option supports OAuth with Snowflake.

Manage Authentication Method and Options

Open your Admin Portal by selecting Administration in the user menu at the top right of your screen.
Select the Authentication page from the left hand panel.
Click the Edit button under Authentication Method and Options.
Select an Authentication Method from the dropdown menu; see Manage authentication.
- If you selected Password, you can optionally specify one or more email domains under Company Domain Signup.
- If you selected 'SAML', see Single Sign On with SAML.
- If you selected 'OAuth', see OAuth with Snowflake.
After completing the form, click Save.

Admin-Initiated password reset

In the Admin Portal, click the People tab.
Locate the user on the Members tab.
If the list is long, you can use the search bar to search by name or email.
Click on the more menu ••• and select Reset user password from the menu.
This action sends a reset password email to the user.

Bulk Password Reset

Admins can initiate a password reset for multiple users. When an admin initiates a password reset, the end user receives an email that informs them that an admin has requested this.

In the Admin Portal, click the People tab.
For each selected user, check the box to the left of their name.
Click Reset password in the toolbar above.
Review your selection and click Confirm.
The selected users receive an email informing them that the org admin has requested that they reset their password.

Company domain signup

When you use the Password authentication method, you can also select if you would like to add any domains to the allowlist. By default, new users can only sign up through an invite.

Adding your company's email domain allows anyone with a company email to create a Sigma account without a personalized invite.

Sigma prompts new users to enter their email from a domain on the allowlist. After confirming the email, the user can register as a Sigma user.