Availability of administrative controls is confirmed during rollout. Your agreement with Almanac governs the features available to your organization.
Choose a sign-in method
Almanac supports single sign-on and email sign-in.
Single sign-on. Members authenticate through your identity provider. Almanac doesn’t store their identity-provider passwords, and access can follow the joining and leaving processes already managed by your directory.
Email sign-in. Members sign in with their work email address and a one-time code. This option may suit organizations that don’t use a directory service.
Your organization can decide which sign-in methods are allowed.
Verify your domains
Verify the email domains associated with your organization before inviting members.
You can also choose whether someone with a verified email address may join automatically or must be invited by an administrator.
Manage sessions
Sessions belong to the browser or device used to sign in and expire according to your organization’s configuration.
Removing a member through your identity provider ends their Almanac session at the next refresh. Contact Almanac to revoke active sessions immediately for a lost device or urgent access issue.
Decide before rollout
Choose:
- Which sign-in methods are allowed.
- Which domains your organization will verify.
- Whether members join by invitation or verified domain.
- Who can request an urgent session revocation.
See Groups and provisioning, Roles and access, and HIPAA configuration.