## Set up authentication

URL: https://docs.atlan.com/platform/concepts/authentication-and-authorization

> Set up authentication for Atlan: configure SSO with Okta, Azure AD, Google, JumpCloud, OneLogin, SAML 2.0, or PingFederate; automate the user lifecycle with SCIM; and set sign-in rules for new users.

# Set up authentication

Atlan supports three authentication modes that build on each other: basic authentication (enabled by default), single sign-on (SSO) so users sign in with their existing identity provider credentials, and SCIM to automate the user lifecycle as people join or leave.

This section covers how users sign in. For what they can do once signed in, see [Permissions & data access](https://docs.atlan.com/llms/governance/access-control/permissions-and-data-access/llms.txt).

## Choose your setup

Each mode builds on the one before it. Use the highest mode that matches your team's needs.

 Atlan-managed email and password, available immediately. Best when:

- Team is under ~10 people

- Manual invites are fine

- No IdP-backed sign-in needed

 Sign in with your existing identity provider. Add it when:

- Your team is 10+ people

- Sign-in must route via your IdP

- Per-user data-source access

 Sync the user lifecycle from your directory. Add it when:

- Frequent joiners and leavers

- Instant offboarding on exit

- Groups managed in your IdP

---