Login methods

We offer multiple methods to log in and the ability to restrict or enforce certain methods for added security.

Login methods

Email login

Log in with an email address and password.

If you forgot your password or need to reset it, click Forgot password? to receive a magic link.

Admins can configure a password policy in Company Settings, for example requiring a minimum length and a minimum number of digits, uppercase letters or symbols.

Google authentication

Members can authenticate with Violet using Google authentication when using a Google supported email address.

Slack authentication

Members can authenticate with Violet using Slack authentication when using an email address associated with a Slack account.

Microsoft authentication

Members can authenticate with Violet using Microsoft authentication when using a Microsoft or Microsoft US supported email address.

To set up Single Sign-On via Microsoft GCC or GCC High (US) follow the instructions below. Users must already exist in Violet with an email matching the email on their Microsoft account.

Microsoft GCC

1. In the Azure portal, register an app: Microsoft Entra ID → App registrations → New registration. Under Supported account types, choose "Accounts in this organizational directory only"

   1. For GCC, this will be in https://portal.azure.com

   2. For GCC High, this will be in https://portal.azure.us

2. Under Redirect URI, choose the Web platform and enter: https://app.violetgov.com/oauth/redirect/

   1. If you are on a single-tenant environment, replace app with your Violet tenant ID

3. From the app's Overview page, copy your:

   1. Application (client) ID - this is your Client ID

   2. Directory (tenant) ID

4. Generate a Client Secret: go to Certificates & secrets → New client secret. Copy the secret Value.

5. Head to Violet Integrations → Credentials, then create a Custom Credential. Enter your Client ID, Client Secret and Directory (tenant) ID and click Save.

Okta

Okta authentication is only available to customers on the Navigator plan.

Configure authentication

Follow the instructions below to configure Okta authentication:

1. In Okta, create a new app in Applications > Create App Integration > OIDC OpenID Connect > Application Type: Web Application

2. In the new application:

   1. Client Authentication is: "Client secret"

   2. Sign-in redirect URI should be (replace <tenant> with your tenant name):

      1. For Violet: https://<tenant>.violetlabs.com/oauth/redirect/

      2. For Violet Staging: https://<tenant>.staging.violetlabs.com/oauth/redirect/

      3. For VioletGov: https://<tenant>.violetgov.com/oauth/redirect/

      4. For VioletGov Staging: https://<tenant>.staging.violetgov.com/oauth/redirect/

   3. Sign-out redirect URI should be (replace <tenant> with your tenant name):

      1. For Violet: https://<tenant>.violetlabs.com

      2. For Violet Staging: https://<tenant>.staging.violetlabs.com

      3. For VioletGov:https://<tenant>.violetgov.com

      4. For VioletGov Staging: https://<tenant>.staging.violetgov.com

3. Once your app is created, generate a client secret

4. In Violet, navigate to Company Settings and select Okta from the "Allowed Login Methods" dropdown menu.

1. In the Okta OIDC Configuration section, fill out the Okta issuer URL, Client ID and Client Secret. Scopes should be populated with: openid profile email . (This will be populated by default)

1. Click Submit.

Enable a one-click login from your Okta dashboard

To enable a one-click login to Violet from your Okta dashboard, set the Initiate Login URI in Okta to the applicable URL below (replace <tenant> with your tenant name):

• For Violet: https://<tenant>.violetlabs.com/api/auth/okta/initiate

• For Violet Staging: https://<tenant>.staging.violetlabs.com/api/auth/okta/initiate

• For VioletGov: https://<tenant>.violetgov.com/api/auth/okta/initiate

• For VioletGov Staging: https://<tenant>.staging.violetgov.com/api/auth/okta/initiate

For example:

Two-factor authentication

Admins can enable Two-factor Authentication in Company Settings. To require it, deselect "None" from the dropdown menu and click Submit.

Restrict login methods

Admins can restrict specific login methods in Company Settings. To disable certain methods, deselect them from the dropdown menu and click Submit.