Sophos Sign-in

You can allow your administrators to sign in using their Sophos Fusion Partner email and password, federated sign-in, or both.

You can set up custom rules for administrators who need different access levels.

Requirements

If you want to use federated sign-in, you must set up a domain and an identity provider. You can assign a user to only one domain and one identity provider. See Set up Federated sign-in.

If you choose to use federated sign-in only as your sign-in option, you must know the following:

• You must ensure that all your administrators are assigned to a domain and have an identity provider.
• Administrators can't reset their passwords. You must turn off federated sign-in only so that they can reset their passwords.
• If you change to using Sophos Fusion Partner email and password only, administrators won't have a password set up that they can use to sign in. They must use "Reset Password" to set a new password and sign in.

Set up Sophos sign-in settings

Show me how

To choose how your administrators sign in, do as follows:

1. Click the Global Settings icon .
2. Click Access Control and click Sign-in and Identity.
3. Select the Sophos Sign-in tab.
4. Choose how you want your administrators to sign in.
5. Add custom sign-in rules for specific administrators, if required.
6. Click Save.

The options you choose here affect what your administrators see when they sign in. See Sign-in options.

Add custom rules

Show me how

You can set up custom rules for administrators who need different access levels.

To do this, do as follows:

1. Click the Global Settings icon .
2. Click Access Control and click Sign-in and Identity.
3. Select the Sophos Sign-in tab.
4. Click Add custom rule.
5. Add the administrators you want to make a custom rule for to Selected Users.
6. Choose how you want them to sign in and click Save.

The rule appears in Sophos Sign-in. It shows the name of the administrators and the sign-in settings that apply to them.