Sign-in policy

The Sign-in policy page in the admin console holds the rules for signing in. Only owners and admins can change them.

Session length

How long a sign-in lasts before people must sign in again. The default is 14 days. You can shorten it to 8 hours, 1 day or 7 days, or lengthen it to 30. A shorter session is safer on shared computers.

Allowed email domains

List one domain per line, for example your company's. When the list is not empty, invitations can only go to addresses on those domains. Leave it empty to allow any address.

Single sign-on

You can save the details of an OpenID Connect or SAML 2.0 provider here. Signing in through it is not available yet, so people keep using email and password. The settings are stored for when it is released.

Two-step verification

See Turn on two-step verification.

Audit log

Every sign-in policy change, and many other actions, are recorded under Audit log in the admin console, with who did it and when.