# Authentication Management

URL: https://select.dev/docs/reference/using-select/access-management/auth-management
Index of all SELECT docs: https://select.dev/docs/llms.txt

> Learn how to configure authentication preferences and methods to suit your security needs.

Modifying authentication settings is only permitted for users with `Admin` access on the SELECT Organization.

## Authentication Management

Authentication settings allow admins to configure how users sign in to SELECT and control org-wide access policies. They can be accessed by navigating to **Settings** → **Authentication**.

**Email & password** and **Google OAuth** authentication methods may be disabled (and re-enabled), which will prevent users from being able to login using that method. At least one method must remain active at all times to prevent lockout.

**Manual user invitations** via email may also be configured. They will be automatically disabled when SSO connections are first created and re-enabled if all SSO connections are removed.

When **MFA enforcement** is enabled, users who don't have it set up yet will be prompted to do so on their next login.

![Authentication settings page](https://cdn.sanity.io/images/wn0ylp2c/production/e51631a7f707757a65bc450ebd80193331edb685-3024x1963.png)

## Enterprise SSO

> [!NOTE]
> Enterprise SSO is an add-on feature. Please contact SELECT to determine your eligibility and receive a quote.

All enabled enterprise SSO connections are listed under the Authentication Methods section along side the default methods.

**To set up a new SSO connection**, click Add SSO and select your provider: 

- [Okta](https://select.dev/docs/reference/using-select/access-management/okta-sso)
- [Microsoft Entra ID (Azure AD)](https://select.dev/docs/reference/using-select/access-management/azure-ad-sso)
- [SAML Identity Provider](https://select.dev/docs/reference/using-select/access-management/saml-sso)

![Add SSO](https://cdn.sanity.io/images/wn0ylp2c/production/89da4e3af4d3c7a819fee3e58ca39d8f4d429615-3024x1963.png)

To **update or remove an SSO connection**, click the edit icon next to it.

![Edit SSO connection](https://cdn.sanity.io/images/wn0ylp2c/production/0cd677ab33fb66c9a8b457b8f130af978f2dc75c-3024x1963.png)

![Delete SSO connection](https://cdn.sanity.io/images/wn0ylp2c/production/e2b4f57fdf72740ee5cffe5a2dbf5398fad25cf9-1512x982.png)