Skip to content

Enabling or disabling a user's email sign-in account

Certificate Manager - SaaS administrators can selectively control which users are allowed to use email sign-in accounts for logging in. If you're a Certificate Manager - SaaS administrator, you can enable or disable the email sign-in account functionality for any user.

Important

The primary purpose for enabling the email sign-in option is for situations where your SSO goes offline—either intentionally or due to an outage of your SSO service—and an alternate authentication method is required.

As a matter of tightening security, using the email sign-in option to sign in to Certificate Manager - SaaS should be reserved for use by authorized administrators, and only in cases where SSO isn't available.

To enable or disable the email sign-in option

  1. Sign in to Venafi Control Plane.

  2. Click Settings > Users.

  3. On the Users page, find and click the user name you want to edit.

  4. Select or clear Enable email sign-in, and then click Save.

Did you know?

To complete the process, owners of accounts where you've enabled email sign-ins will need to set up their email sign-in password. Once set, then the next time they sign in to Certificate Manager - SaaS, they'll have the option of signing in using either SSO or by entering their email sign-in credentials.

Important: This is different from disabling the user account access

On the Users page, there is an Enabled option. When on, the user's account can log in to the system (via SSO, and via e-mail sign in, if that feature is enabled). When off, the user's account can not log in to the system at all, even if the Enable email sign-in option is checked, becuase the account as a whole is deactivated.