Login Methods
How users authenticate into Upstat and what security controls are available.
Upstat offers multiple secure login options to support flexibility, ease of access, and compliance with your organization’s authentication policies.
Supported Login Methods
1. Google SSO
Users can sign in using their Google Workspace or Gmail account.
This is the recommended method for most organizations due to its convenience and security.
- No password to manage
- Automatically inherits Google’s 2FA if enabled
- Available to all users by default
2. Email + Password
Users may also create an account using a traditional email/password combination.
- Requires setting a strong password during signup
- Can be used by any team, regardless of email provider
- Recommended for those not using Google or when access isolation is needed
Future Methods
Upstat plans to support additional enterprise authentication options:
- SAML SSO
- OpenID Connect
These will allow integration with providers like Okta, Azure AD, OneLogin, and others.
Switching Login Methods
Users cannot currently switch between login methods after account creation. If a user signed up using Google SSO, they must continue to use it. Support for login method changes may be introduced in the future.
Account Access Policies
Admins can manage authentication options indirectly by:
- Enforcing 2FA at the profile level
- Inviting users via approved domains (e.g.,
@yourcompany.com) - Auditing account access through usage logs (Audit Logging is in progress)
Summary
- Upstat supports Google SSO and email/password login today
- Future support for SAML and OpenID Connect is planned
- Google SSO is recommended for most users due to security and ease of use
- Admins can enforce additional security through 2FA and access reviews
Learn more