Configure sign-in methods
Sign-in methods are account-wide settings. Only users with an Account admin user role or a custom user role containing Manage accounts permission can configure sign-in methods.
Before changing a sign-in method:
Confirm that the method meets your agency’s authentication policy.
Confirm that affected users can use the method.
Communicate the change to affected users.
Verify successful sign-in after the change.
Review the platform audit logs for unexpected authentication activity.
Incorrect sign-in configuration can prevent authorized users from accessing the account. Follow your agency’s account-recovery procedures when planning an account-wide change.
Two-factor authentication
Two-factor authentication remains enforced regardless of the sign-in method. It cannot disable the requirement.
二要素認証（2FA）とシングルサインオン（SSO）
二要素認証（2FA）が有効な場合の動作:
SAML を使用した SSO
たとえ IdP （ID プロバイダ）に対してすでに OTP を入力していても、デジサートはサインイン時に OTP の入力を再度求めます。
OIDC を使用した SSO
IdP に対してすでに OTP が入力されている場合、デジサートは OTP の入力を求めません。