Login Methods
Playground doesn't ask for separate credentials. Instead, it lets people sign in with an identity they already have, so that they don't need to remember another set of credentials. People can sign up or log in at any time with any of the methods that are turned on for your Playground.
Supported methods
| Method | Notes |
|---|---|
| Salesforce | Sign in with a Salesforce account |
| Sign in with a Google account | |
| SAML 2.0 | Your company identity provider, such as Okta, Microsoft Entra ID or OneLogin. Available on 2.1.10 and later |
| OpenID Connect | Any OpenID Connect identity provider. Available on 2.1.10 and later |
Admins of a Private Exchange choose which methods are available, and can require single sign-on so that the company identity provider is the only way in. See Sign-in Methods & Policy, SAML 2.0 and OpenID Connect.
How accounts are matched
Sign-in matches the person's email address within the Playground. It lets you log in even if you use a different method the second time, which keeps the whole process simple.
On a private Playground the email must also be on the admin's list of allowed email domains, exactly. This applies to every method.
With single sign-on (SAML 2.0 or OpenID Connect) the email is used for the first sign-in. Playground then links the account to the identity provider's stable ID, so later sign-ins keep working even if the person's email changes.
note
- Signup/Login methods match with an email address.
- Any method can be used to log in to an account as long as the email address is the same.
- People will not have access to this app if, for some reason, they don't own the original email address they signed up with.