Decide what it takes to sign in
Require a passkey or two-step sign-in, choose the methods allowed and how long a sign-in lasts. It applies to every app, the command line and AI clients.
Passkeys or two-step sign-in
Accept any sign-in, require a passkey or two-step sign-in, or allow passkeys only. Two-step sign-in means a password and a second step, such as a code from an authenticator app.
Methods and how long a sign-in lasts
Allow passwords, passkeys or both, and set the hours after which a sign-in stops reaching your organisation and people sign in again.
A grace period
When you tighten the policy, give members up to 90 days. They keep access meanwhile and are told what to set up, and the policy lists who doesn't meet it yet.
Caity in your organisation
Decide whether Caity works in your organisation, in which apps, and how much each chat may do without asking. Admins can narrow this; only owners can widen it.
Where the policy applies
Every sign-in
It's checked whenever a sign-in reaches your organisation: every app, the command line and AI clients.
People see why
Their account page says what to do: add a passkey or an authenticator app, turn on text codes, or sign in again.
Only owners change it
An owner who doesn't meet a stricter policy yet has to give a grace period.
Run your organisation's access in Tenant
Every Business plan includes it, for the owners and admins who look after your people and how they sign in.