Login policy is a company-wide security setting that is used to limit login options for company users. This will require your users to set up or change their login method according to your company login policy.
Please note: only admins can set your company-wide login policy and these changes also go into effect for newly invited team members
The available policies are:
Enforcing the "Email and password with 2FA" or "SSO" login policy
At the bottom of the sidebar, click Settings, then Security.
Next, click "2FA or SSO".
The reason this policy is 2FA or SSO is to avoid issues with conflicting login policies for users that are part of multiple companies. Suppose one company defines a policy that requires only email and password with 2FA, and another company demands SSO, then the user would be unable to login to the company requiring SSO.
Click Save changes. And you're almost done!
Important: Since we offer all users the choice of using either 2FA or SSO, it will be necessary for you to inform your users of which login method they should choose.
After you've clicked "Save changes" your users will immediately receive an email like this:
From that moment on, users have 7 days to change their login method.
Enforcing the "SSO" login policy
For single sign-on policies, we allow for any of the providers, i.e. you CANNOT set a policy that would limit login options to just Google login — it can always be Google OR Microsoft.
At the bottom of the sidebar, click Settings, then Security.
Next, click "SSO".
Click Save changes. And you're almost done!
Important: Since we offer all users the choice of using either Microsoft or Google, it will be necessary for you to inform your users whether they should choose Microsoft or Google.
After you've clicked Save changes your users will immediately receive an email. From that moment on, users have 7 days to change their login method.
What happens if a user doesn't change their login method within 7 days?
During the 7-day period, your users will see some red banners in the Homerun interface. These banners display messages like "You need to update the login method of your Homerun account" and "The admin of [company name] has requested that everyone in the company enables [login method]".
If users have not set up your preferred login policy within the 7-day period, they will be continuously redirected to their settings page. They will not be able to perform any other actions in Homerun until they have activated the login method. This is to ensure that all users are compliant with your login policy and the security of your dashboard.
To see which users have and/or haven't switched to your preferred login policy yet, check out the Team management page where you'll find an overview of all users including what their login method is.
