Login and SSO settings

Problem Admins cannot require teammates to use two-factor authentication, leaving account security dependent on individual compliance. Request Allow admins to enforce 2FA company-wide, blocking access for teammates who have not completed setup. Th...

Enterprise customers deploying Front at scale need a way to pre-populate the company-specific SAML SSO URL in the Windows desktop app before first user login. Today, users must manually select SSO and enter the company URL/domain on first launch, ...

Problem There is no way to update a teammate's login email from company settings, requiring workarounds when email addresses change. Request Allow admins to edit a teammate's login email directly from the teammate management page, with appropriate...

Problem When a teammate cannot access their password recovery email (e.g., through Outlook or Gmail), there is no way for admins to help them regain access to Front. Request Allow company admins to reset a teammate's password and share temporary c...

Problem Admins cannot require teammates to periodically reset their Front login passwords, which may not meet organizational security policies. Request Allow admins to configure a policy that forces teammates to reset their Front password on a reg...

Problem When setting up DNS records for domain verification, the copy button includes extraneous text. Users must manually extract the relevant portion, which adds friction and increases the chance of errors. Request Update the copy action on DNS ...

Problem Front only supports 2FA via authenticator apps. If a user loses their phone or switches devices, they lose access to their authenticator codes and cannot log in. Request Add SMS as an alternative 2FA method so users can receive verificatio...

Problem Password fields in Front's login flow do not have a visibility toggle. Users cannot verify their input, which is especially frustrating when pasting credentials from a password manager. Request Add a "show/hide password" toggle to all pass...

Problem Google Workspace IdP doesn't currently support Front's teammate templates when provisioning users. Request Enable Google Workspace IdP to use Front's teammate templates for managing user provisioning.

Problem Users and admins must contact Support to disable OAuth login for their accounts, creating an unnecessary dependency and delay. Request Add a self-service toggle in settings for users to disable OAuth login, and allow admins to manage this ...