Skip to main content

Set up authentication

Connect docs via MCP

Atlan supports three authentication modes that build on each other: basic authentication (enabled by default), single sign-on (SSO) so users sign in with their existing identity provider credentials, and SCIM to automate the user lifecycle as people join or leave.

This section covers how users sign in. For what they can do once signed in, see Permissions & data access.

Choose your setup​

Each mode builds on the one before it. Use the highest mode that matches your team's needs.

Basic authentication

Already on · no setup

Atlan-managed email and password, available immediately. Best when:

  • Team is under ~10 people
  • Manual invites are fine
  • No IdP-backed sign-in needed
Invite users →

Single sign-on

For growing teams

Sign in with your existing identity provider. Add it when:

  • Your team is 10+ people
  • Sign-in must route via your IdP
  • Per-user data-source access
Set up SSO →

SCIM provisioning

Optional · needs SSO first

Sync the user lifecycle from your directory. Add it when:

  • Frequent joiners and leavers
  • Instant offboarding on exit
  • Groups managed in your IdP
Add SCIM after SSO →