Where it stands
A sign-in path that checks a person's password against your LDAP or Active Directory server is built. What is not finished is loading your directory's connection settings into it, so directory sign-in cannot be switched on for anyone yet. When it can, it will be part of the Enterprise plan, and it will need your directory to be reachable from our servers — over the internet with TLS, or through a VPN or proxy.
Directory group-to-role sync, automatic creation of people on first sign-in, and removing access when someone leaves a directory group are not built.
What works today
- Google and Microsoft sign-in on every plan — for most companies on Microsoft 365, Microsoft sign-in already uses the directory you run.
- Passkeys and two-factor authentication on top of a password.
- Suspend or remove someone in one step from your settings, which ends their sessions everywhere.
If you need LDAP
Tell us about your directory and when you need it. We will tell you where it stands rather than guess at a date.
Related
See SAML 2.0 and the security page for the full sign-in model.