Security & access

Log in to Cevoid with an email code, your Google account, or your company's single sign-on (SSO), and add multi-factor authentication (MFA) for an extra layer of security. Admins can require MFA for everyone in the workspace.

Navigate to Settings → Security & access⁠ to manage your workspace's security settings.

Log in at app.cevoid.com/login⁠. Cevoid offers passwordless authentication:

• Continue with Google: Log in with your Google account
• Continue with email: Enter your email and click Log in. Cevoid emails you a temporary login code to enter under Check your email.
• Continue with SSO: Enter your work email to log in through your company's identity provider. See Log in with SSO.

If MFA is on for your account, Cevoid then asks for a code from your authenticator app. See Log in with MFA.

Add an extra layer of security with MFA using an authenticator app such as Google Authenticator. Each time you log in, you enter the code your authenticator app shows, after your email code, Google, or SSO.

1. Navigate to Settings → Account⁠
2. Click Enable MFA
3. Scan the QR code with your authenticator app, or enter the secret under Can't scan QR code?
4. Enter the 6-digit code from your authenticator app in Verification Code
5. Click Next. Your recovery codes appear under Codes.
6. Copy the recovery codes and keep them safe
7. Click Done. Enabled shows next to Multi-factor authentication (MFA).

Cevoid shows your 10 recovery codes only once. If you lose access to your authenticator app, log in with a recovery code instead. Each code works once.

With MFA on, Multi-factor authentication opens after you log in, and the first time you switch to the workspace after you log in. Enter the code your authenticator app shows. Without your authenticator app, click Use recovery code and enter one of your recovery codes. Use authenticator app switches back.

Disable MFA turns off MFA for your account in the workspace you're in. While the workspace enforces MFA, Disable MFA is unavailable, and Settings → Account⁠ says the workspace requires MFA for every team member.

1. Navigate to Settings → Account⁠
2. Click Disable MFA
3. Enter the 6-digit code from your authenticator app in Verification Code. To enter a recovery code instead, click Use recovery code.
4. Click Disable. Multi-factor authentication disabled shows.

Your recovery codes stop working too. When you enable MFA again, you get new ones.

Only admins can enforce MFA, which requires every team member to use it to access the workspace. Enable MFA for your own account first: see Enable MFA for your account. Otherwise, Save changes shows Failed to enforce MFA.

1. Navigate to Settings → Security & access⁠
2. Enable Enforce multi-factor authentication (MFA)
3. Click Save changes

Once MFA is enforced, team members without MFA see Enable Multi-Factor Authentication the next time they log in or switch to the workspace. Enable opens the same setup as enabling MFA for your account. No one can disable MFA for their account while the workspace enforces it.

Cevoid supports SSO over SAML or OpenID Connect, with identity providers such as Okta, Microsoft Entra ID (Azure AD), Google Workspace, and OneLogin. To set up SSO for your workspace, contact Cevoid support.

1. Navigate to app.cevoid.com/login⁠ and click Continue with SSO
2. Enter your work email
3. Click Continue with SSO. Your company's sign-in page opens.
4. Log in with your company account. Cevoid opens your workspace, or Select account when your company's SSO covers several.

• Logging in: The workspace opens only when you log in with Continue with SSO. When you log in with email or Google, it isn't in your workspace menu.
• Joining: No one is invited. A person joins as a user the first time they log in with SSO, in every workspace your company's SSO covers.
• Roles: To change a team member's role, a workspace admin contacts Cevoid support
• Access: Your IT administrator adds and removes people in your identity provider. Settings → Team⁠ shows Access managed through SSO instead of the team list. See The Team page in an SSO workspace.