How people sign in
On Security, choose email code, an authenticator app or passkey, and Google or Microsoft. There are no passwords.
In the company settings rail, choose Security. The heading is Security. The line under it is How people sign in to Studio, and when it checks again.
Right now
Right now is the saved company policy. The note says Saved company policy. Pending changes do not affect this summary. It names the sign-in methods, whether a second step is required, and whether Google, Microsoft or single sign-on can satisfy both steps.
Each person sets up their own authenticator or passkey under their user menu, in Sign-in & security. The link on this page is Your sign-in & security.
How people sign in
The section is How people sign in. The note is Choose the ways in. There are no passwords. Each switch saves at once. The section then says Saved.
| Way in | What the row says |
|---|---|
| Email code | A 6-digit code sent to their work email. Always on, so nobody is locked out. The row says Always on. It is not a switch. |
| Authenticator app or passkey | Optional. Once someone adds one, they can use it instead of waiting for an email. |
| Google or Microsoft | Recommended. Sign in with the company's Google Workspace or Microsoft 365 account. Their own security applies. One switch turns both on. |
Google uses that switch only. Security does not ask for a Google tenant ID or a Google approval link. Microsoft has its own section after the switch. See Sign in with Microsoft.
What a way in does not do
- Turning a way on does not invite anyone. People still join by invitation, and an access level is chosen then. See Access levels.
- A matching email does not link a Google or Microsoft account. On Sign-in & security, Ways to sign in says Any of these gets you in. An account is only ever added here by you, never because its email matches.
- When single sign-on is required, Right now says Single sign-on is required. Only the designated recovery person may use an email code or passkey, if enabled. With no recovery person it says Single sign-on is required. No recovery person is configured. The Email code row still says Always on. Single sign-on is the next section, and its button is Set up.