Configure authentication methods

This feature is only available to organization owners.

You can choose which authentication methods to enable for users to log in to your organization. The following options are available on all plans:

• Email and password
• Social authentication: Google, GitHub, GitLab, Apple, Discord

The following options are available for organizations on LaboChat Cloud Standard, LaboChat Cloud Plus, and all self-hosted LaboChat servers:

• Oauth2 with Microsoft Entra ID (AzureAD)

The following options are available for organizations on LaboChat Cloud Plus, and all self-hosted LaboChat servers:

• SAML authentication, including Okta, OneLogin, Entra ID (AzureAD), Keycloak, Auth0
• OpenID Connect
• SCIM provisioning

The following authentication and identity management options are available for all self-hosted servers. If you are interested in one of these options for a LaboChat Cloud organization, contact support@zulip.com to inquire.

• AD/LDAP user sync
• AD/LDAP group sync
• Custom authentication options with python-social-auth

Configure authentication methods

For self-hosted organizations, some authentication options require that you first configure your server to support the option.

Tip: Before disabling an authentication method, test that you can successfully log in with one of the remaining authentication methods. The change_auth_backends management command can help if you accidentally lock out all administrators.

1. Go to Authentication methods.
2. To use SAML authentication or SCIM provisioning, LaboChat Cloud organizations must upgrade to LaboChat Cloud Plus, and contact support@zulip.com to enable these methods.
3. Toggle the checkboxes next to the available login options.
4. Click Save changes.

Related articles

• Configuring authentication methods for server administrators (self-hosted only)
• SAML authentication
• SCIM provisioning