About Authentication

Updated by Cheryl Wallace

ToolHound supports two methods of user authentication in addition to user passwords: Single Sign On (SSO) and Two Factor Authentication (2FA). These authentication methods apply only to browser logins, not to TH6 Mobile.

Single Sign On (SSO)

Single Sign On (SSO) is an alternative to logging in to ToolHound with a password. When SSO is enabled, it permits login authentication for a ToolHound user with the credentials from another application. The ToolHound user email address must match the email used with the corresponding application. Each user must have a unique email address when using SSO.

ToolHound supports login authentication from Google and Microsoft.

Enabling SSO does not prevent a user from logging in to ToolHound with a password. To force the use of SSO, set the Disable Local Login option.

In order to use SSO, ToolHound users must be created with an email matching your SSO provider's user email. Even when using Microsoft Entra ID (formerly Azure Active Directory or Azure AD), a user must be created in ToolHound with an email address matching that in Entra ID.
Watch this video overview of using SSO.
Two Factor Authentication

Two Factor Authentication (2FA) or two-step verification is an additional layer of authentication for user logins on top of a password login. ToolHound supports using your choice of authenticator app, such as Microsoft Authenticator, to provide a time limited, single use code for each user at time of login.

When this feature is enabled, each user must configure their own ToolHound user as an account in an authenticator app. 2FA will then be used on subsequent logins.

Should the user be exempt from 2FA or need to reset their 2FA account, the user record can be set to Disable 2FA until they have logged in. Until this flag is removed, the user will not have the ability to configure 2FA.

Watch this video overview of using 2FA.

See also:

​Copyright © 2020-2024 ToolHound Inc. All Rights Reserved.

How did we do?