← All help

Team and account security

Invite your team, give everyone the right role and keep your account safe.

Roles

  • Owner: everything, including billing, deleting the workspace and transferring ownership.
  • Admin: monitors, alerts, incidents, status page and inviting people.
  • Viewer: can look at everything but change nothing.

Invite people under Team. Invitation links work once and expire. Your plan decides how many members a workspace can have.

Signing in

Sign in with your email and password, or with Google or GitHub if they're offered. Connect or disconnect them under Your account → Sign-in methods. If you signed up with Google or GitHub you can set a password there too.

Single sign-on (SAML)

On the Business plan, the owner connects your identity provider (Okta, Microsoft Entra ID, Google Workspace, JumpCloud or any SAML 2.0 provider) under Team → Single sign-on:

  1. Create a SAML app in your identity provider with the Entity ID and ACS URL shown, Name ID format *email address*, and the assertion signed with SHA-256.
  2. Paste the provider's metadata XML (or its entity ID, sign-in URL and certificate) into Uplance.
  3. Add your email domain and create the TXT record shown. Only addresses on verified domains can sign in, so your identity provider can never sign in someone outside your company.
  4. Press Test sign-in.

People then choose Sign in with SSO on the sign-in page and enter their work email. The first time, they get an account and join the workspace with the role you picked. Your identity provider handles their second factor.

Once it works, Require SSO makes it the only way for members to open the workspace. The owner can still sign in any way, so a broken identity provider can't lock you out. API keys keep working.

Two-factor authentication

Turn it on under Your account with an app like Google Authenticator, 1Password or Authy. You'll be asked for a code at every sign-in, including sign-ins with Google or GitHub. Lost your phone? Contact support.

Passkeys

Add a passkey under Your account → Passkeys to sign in with Face ID, Touch ID, Windows Hello or a security key: no password and no code, because your device already checks it's you. Passkeys can't be phished. They only work on this site's own address. We email you whenever one is added. If you didn't add it, reset your password and remove it.

Sessions and notices

Your account → Sessions lists where you're signed in; sign out a device or everywhere else. Sessions end after 7 days without use. You get an email when someone signs in from a kind of device you haven't used before, when your password changes, when a passkey is added and when two-factor authentication is turned off.

API keys

Create keys under Settings → API & automation. A key acts with the role of the person who created it, is shown once and is stored only as a hash. Revoke keys you no longer use.

Your data

Your account → Download my data gives you everything stored about you and the workspaces you own as a JSON file. Delete account removes your account and every workspace only you use; it isn't possible while you own a workspace other people use.

NextPlans and billing