Enabling or disabling a user's email sign-in account¶
TLS Protect Cloud administrators can selectively control which users are allowed to use email sign-in accounts for logging in. If you're a TLS Protect Cloud administrator, you can enable or disable the email sign-in account functionality for any user.
Important
The primary purpose for enabling the email sign-in option is for situations where your SSO goes offline—either intentionally or due to an outage of your SSO service—and an alternate authentication method is required.
As a matter of tightening security, using the email sign-in option to sign in to TLS Protect Cloud should be reserved for use by authorized administrators, and only in cases where SSO isn't available.
To enable or disable the email sign-in option¶
- Sign in to Venafi Control Plane.
-
Click Settings > Users.
-
On the Users page, find and click the user name you want to edit.
-
Select or clear Enable local login, and then click Save.
Did you know?
To complete the process, owners of accounts where you've enabled email sign-ins will need to set up their email sign-in password. Once set, then the next time they sign in to TLS Protect Cloud, they'll have the option of signing in using either SSO or by entering their email sign-in credentials.