Set up your security settings

Settings > Security has four tabs: Two-Factor Authentication, Audit Logs, SSO, and Data Retention.

Two-factor authentication

Secure your account with an authenticator app such as Google Authenticator or Authy. Scan the code, enter a verification code to confirm, then save the recovery codes somewhere safe in case you lose your device. You can generate new recovery codes from the same tab later.

Roles that must use it

Owners, System Administrators, and Organization Administrators are required to turn on two-factor authentication, and are prompted to set it up when they sign in.

Audit Logs

The Audit Logs tab records what happens in your organization: sign-ins, record changes, permission changes, and exports. Nobody can edit or delete it, including you.

SSO (SAML)

The SSO tab sets up SAML 2.0 single sign-on with an identity provider such as Okta, Microsoft Entra, OneLogin, or JumpCloud. Tormano gives you the details to register on their side, and you supply your provider’s entity ID, sign-on address, and certificate. Turn on Enforce SSO and email-and-password sign-in stops working, so everyone must come through your provider.

The Continue with Google and Continue with Microsoft buttons on the sign-in page are separate shortcuts and are not set up here.

Data Retention

Set how long certain records are kept before Tormano clears them out.