Set up authentication
Set up authentication for Atlan: configure SSO with Okta, Azure AD, Google, JumpCloud, OneLogin, SAML 2.0, or PingFederate; automate the user lifecycle with SCIM; and set sign-in rules for new users.
Atlan supports three authentication modes that build on each other: basic authentication (enabled by default), single sign-on (SSO) so users sign in with their existing identity provider credentials, and SCIM to automate the user lifecycle as people join or leave.
This section covers how users sign in. For what they can do once signed in, see Permissions & data access.
Choose your setup
Each mode builds on the one before it. Use the highest mode that matches your team's needs.
Basic authentication
Already on · no setupAtlan-managed email and password, available immediately. Best when:
- Team is under ~10 people
- Manual invites are fine
- No IdP-backed sign-in needed
Single sign-on
For growing teamsSign in with your existing identity provider. Add it when:
- Your team is 10+ people
- Sign-in must route via your IdP
- Per-user data-source access
SCIM provisioning
Optional · needs SSO firstSync the user lifecycle from your directory. Add it when:
- Frequent joiners and leavers
- Instant offboarding on exit
- Groups managed in your IdP