Organization Settings
This page is only visible to organization administrators.
Configure security policies for your entire organization, including MFA enforcement and password requirements.
Accessing Settings
Navigate to Settings under the Admin section in the sidebar.
The settings page has two sections: Security and Password Policy.
Security
Require MFA for All Users
Toggle the Require MFA for all users switch to enforce multi-factor authentication organization-wide.
When enabled:
- Users without MFA will be prompted to set it up on their next sign-in
- Users cannot disable MFA while the requirement is active
- New users must set up MFA during their first login
When disabled:
- MFA becomes optional for all users
- Users can still enable MFA voluntarily on their Security page
Enabling MFA enforcement does not immediately lock out users. They are prompted to set up MFA on their next sign-in.
Password Policy
Configure minimum password requirements that apply to all new passwords in your organization.
Minimum Password Length
Set the Minimum password length field to a value between 8 and 128 characters.
Complexity Requirements
Check any combination of requirements:
- Require uppercase letter — Password must contain at least one uppercase letter
- Require lowercase letter — Password must contain at least one lowercase letter
- Require digit — Password must contain at least one number
- Require special character — Password must contain at least one special character
Password Expiration
Set the Password expiration (days) field to require periodic password changes. Enter a value between 1 and 365 days, or leave empty to disable password expiration.
When a password expires:
- The user is shown a Change your password screen on their next sign-in
- They must set a new password before they can continue
- The new password must meet the current policy requirements
Saving Changes
Click Save Password Policy to apply your changes.
Password policy changes apply to new passwords only. Existing passwords are not affected until users change them or their passwords expire.
Next Steps
API Reference: For programmatic access, see Update Organization.