Skip to main content
The Security tab holds the sign-in settings that apply to your whole organization: single sign-on and login methods. Open it from Organization → Security.
You need the right permissionThis tab is available to organization admins and to members whose role carries the SSO management permission. Security permissions can only be granted at the organization level — see Roles.

​
Domain verification

Before you can configure SSO you have to prove you own the domain your team signs in with. The Domain verification panel is the first thing on this tab, and Configure domain starts that process. Until a domain is verified, Configure SSO stays disabled — the tab says so directly: “You must verify a domain before configuring SSO.” If you are planning an SSO rollout, start here rather than at the SSO panel.

​
Single sign-on (SSO)

Let your team sign in through your own identity provider using SAML 2.0. This reduces the number of passwords in circulation and lets you manage access centrally. The panel shows whether an SSO connection is configured yet, and Configure SSO is where you set it up once your domain is verified. Step-by-step guides: SAML 2.0 is the supported protocol. OpenID Connect (OIDC), SCIM user provisioning, and automatic permission assignment from identity-provider groups are not supported.

​
Login methods

Login methods lists the ways your team can sign in — Email and password, and Single Sign-On — and shows which are enabled for your organization.
These are not self-serviceBoth rows read “Contact the Yuno team to update this setting.” You can see which login methods are active, but changing them is a request to Yuno rather than a toggle you control.

​
Personal security settings

Your own password and two-factor authentication are not here. They stay in the Security page behind your profile image, because they belong to you rather than to the organization.
Organization-wide 2FA enforcementEnforcing two-factor authentication across your organization is a policy Yuno manages for you rather than a self-service setting. Contact the Yuno team to change your organization’s 2FA enforcement policy.

​
Security best practices

  • Use SSO where you can — it centralizes access and removes passwords from circulation.
  • Enable two-factor authentication on your own account, so a compromised password is not enough to get in.
  • Review access regularly — check Team members for people who no longer need access, and Audit logs for what changed.