Authentication - StatusStack Documentation

Overview

StatusStack supports multiple authentication methods to fit your security requirements, from simple email/password to enterprise SSO.

Authentication Methods

Email & Password

Traditional username/password authentication

Google OAuth

Microsoft OAuth

Passkeys

SAML 2.0

Enterprise single sign-on (Enterprise plan)

Email & Password

Creating an Account

Visit statusstack.com/register

Enter Details

Email: your@company.com
Password: (8+ characters, mix of letters/numbers/symbols)
Company Name: Your Company

Verify Email

Check your email for verification linkClick link to activate account

Complete Setup

Set up your first team and Stack

Password Requirements

Minimum requirements:

8 characters minimum
At least one uppercase letter
At least one number
At least one special character

Recommended:

12+ characters
Use a password manager
Unique password (not reused)
Enable 2FA for added security

Password Reset

Request Reset

Go to statusstack.com/forgot-password

Check Email

Reset link sent to your emailValid for 1 hour

Set New Password

Click link and enter new password

OAuth Authentication

Click Google Sign-In

On login page, click “Sign in with Google”

Select Account

Choose your Google account

Grant Permissions

Allow StatusStack to:

View email address
View basic profile info

Logged In

Automatically redirected to dashboard

Benefits:

No password to remember
Automatic security from Google
Faster login
Google 2FA supported

Click Microsoft Sign-In

On login page, click “Sign in with Microsoft”

Enter Microsoft Email

Use your work or personal Microsoft account

Authenticate

Complete Microsoft authenticationSupports Azure AD and MFA

Logged In

Redirected to dashboard

Enterprise benefits:

Integrates with Azure AD
Respects conditional access policies
Supports multi-factor authentication
Centralized account management

Passkeys

Sign in with a fingerprint, face scan, screen lock, or hardware security key. Works on the customer dashboard and the MSP Console. No plan gate. A successful passkey login also satisfies 2FA — you are not asked for an authenticator or SMS code after it succeeds.

You’ll need an account password before you can add a passkey. Google, Microsoft, or magic-link-only accounts must set a password first. Passkeys work on statusstack.com only — not MSP white-label custom domains, and not the Statamic CMS admin.

What you’ll see

Place	Path
Sign in	”Sign in with passkey” on the customer login and the MSP login
Customer manage	Settings → Profile Settings → Passkeys
MSP manage	Settings → Security (same manager). MSP users cannot use the customer profile page.

Add a passkey (customer dashboard)

Open Passkeys

Settings → Profile Settings → Passkeys

Confirm your password

Re-enter your current account password.

Add a passkey

Complete the browser or OS prompt (biometrics, screen lock, or security key).

The passkey appears in the list with its name and creation date. Remove it anytime from the same tab. Adding another passkey (laptop + hardware key) is supported.

MSP users add and remove passkeys at Settings → Security, not the customer profile page.

Two-Factor Authentication (2FA)

Add an extra layer of security:

Enabling 2FA

Open Security Settings

Dashboard → Settings → Security → Two-Factor Authentication

Choose Method

Authenticator App
SMS

Recommended

Install authenticator app (Google Authenticator, Authy, 1Password)
Scan QR code
Enter 6-digit code
Save backup codes

Save Backup Codes

Important: Store backup codes securely

XXXX-XXXX-XXXX
XXXX-XXXX-XXXX
XXXX-XXXX-XXXX

Use if you lose access to 2FA device

2FA Enabled

Required on every login

Using 2FA

Login flow with 2FA:

Enter email and password
Prompted for 6-digit code
Open authenticator app
Enter current code
Logged in

Passkey login: a successful passkey sign-in satisfies 2FA. You only see the 2FA prompt when signing in with password (or another method that does not complete the passkey ceremony). Trusted devices:

Optionally mark device as trusted
Skip 2FA for 30 days on that device
Can revoke trust anytime

SAML 2.0 SSO (Enterprise)

Enterprise single sign-on integration:

Supported Identity Providers

Okta
Azure AD
Google Workspace
OneLogin
Auth0
JumpCloud
Custom SAML 2.0 providers

SAML Setup

Contact Sales

SAML SSO requires Enterprise planEmail: sales@statusstack.com

Configure IdP

In your identity provider:

ACS URL: https://statusstack.com/saml/acs
Entity ID: https://statusstack.com
Name ID Format: Email Address

Provide Metadata

Share SAML metadata XML with StatusStack:

IdP Entity ID
SSO URL
Signing Certificate

Configure StatusStack

StatusStack team configures:

SAML endpoint
Attribute mapping
Domain verification
JIT provisioning (optional)

Test Connection

Test SSO flow:

Visit statusstack.com/login
Enter work email
Redirect to IdP
Authenticate
Return to StatusStack

Just-in-Time (JIT) Provisioning

Auto-create accounts on first login:

SAML Attributes Mapping:
  Email: email
  First Name: firstName
  Last Name: lastName
  Department: department
  Role: role (optional)

JIT Settings:
  Auto-create users: Yes
  Default team: Automatically assigned
  Default role: Member

Benefits:

No manual user creation
Automatic onboarding
Consistent with IdP

Session Management

Session Duration

Default session length:

Web: 7 days (with activity)
Mobile: 30 days
API tokens: No expiration (revocable)

Extend or reduce:

Enterprise: Configure custom session duration
Security → Session Settings

Active Sessions

View and manage sessions: Dashboard → Settings → Security → Active Sessions

Device: Chrome on macOS
Location: San Francisco, CA
Last Active: 5 minutes ago
[Revoke]

Device: Safari on iPhone
Location: San Francisco, CA
Last Active: 2 hours ago
[Revoke]

Revoke suspicious sessions immediately

Security Best Practices

Use Strong Passwords

Requirements:

12+ characters
Mix of uppercase, lowercase, numbers, symbols
Unique (not reused elsewhere)
Use a password manager

Benefits:

Phishing-resistant sign-in
Satisfies 2FA on successful login
Works on customer dashboard and MSP Console

Register from Profile Settings (customers) or Settings → Security (MSP). Keep a password as a backup for devices without a passkey.

Enable 2FA

Mandatory for:

Organization owners
Admins
Users with access to production Stacks

Recommended for: Everyone (or use a passkey, which satisfies 2FA on login)

Use SSO (Enterprise)

Benefits:

Centralized authentication
Automatic deprovisioning
Enforced security policies
Audit logging

Review Active Sessions

Monthly:

Review active sessions
Revoke unknown devices
Check login locations
Verify login times

Troubleshooting

Issue: “Invalid credentials” error Check:

Email address is correct
Password is correct (case-sensitive)
Account is verified (check email)
Account is not locked

Solutions:

Reset password
Check spam folder for verification email
Contact support if account locked

2FA Code Not Working

Issue: “Invalid code” error Check:

Clock on device is synchronized
Entering current code (refreshes every 30s)
Using correct authenticator app

Solutions:

Use backup code
Disable and re-enable 2FA
Contact support for 2FA reset

Passkey Not Working

Issue: Browser does not offer a passkey, or sign-in fails Check:

You registered a passkey for this account
You are on statusstack.com, not an MSP white-label custom domain
The device or security key that holds the passkey is available
You have a password if you still need to add a passkey (OAuth or magic-link-only accounts)

Solutions:

Sign in with email and password (and 2FA if enabled), then add a passkey
MSP users: manage passkeys at Settings → Security, not the customer profile page
Try a different Chromium or Safari browser that supports passkeys

Issue: “Error connecting to [Google/Microsoft]” Check:

Pop-ups are allowed
Third-party cookies enabled
Not using private/incognito mode

Solutions:

Allow pop-ups for statusstack.com
Try different browser
Use email/password instead

SAML Not Working

Issue: “SAML authentication failed” Check:

SAML is configured for your domain
IdP metadata is current
Certificates not expired

Solutions:

Contact your IT administrator
Email support@statusstack.com with:
- Organization name
- Email address
- Screenshot of error

Next Steps

Security Settings

Configure security settings

Team Management

Invite team members

Subscription Plans

Compare plans

​Overview

​Authentication Methods

Email & Password

Google OAuth

Microsoft OAuth

Passkeys

SAML 2.0

​Email & Password

​Creating an Account

​Password Requirements

​Password Reset

​OAuth Authentication

​Google Sign-In

​Microsoft Sign-In

​Passkeys

​What you’ll see

​Add a passkey (customer dashboard)

​Two-Factor Authentication (2FA)

​Enabling 2FA

​Using 2FA

​SAML 2.0 SSO (Enterprise)

​Supported Identity Providers

​SAML Setup

​Just-in-Time (JIT) Provisioning

​Session Management

​Session Duration

​Active Sessions

​Security Best Practices

​Troubleshooting

​Can’t Login

​2FA Code Not Working

​Passkey Not Working

​OAuth Login Failing

​SAML Not Working

​Next Steps

Security Settings

Team Management

Subscription Plans

Overview

Authentication Methods

Email & Password

Creating an Account

Password Requirements

Password Reset

OAuth Authentication

Google Sign-In

Microsoft Sign-In

Passkeys

What you’ll see

Add a passkey (customer dashboard)

Two-Factor Authentication (2FA)

Enabling 2FA

Using 2FA

SAML 2.0 SSO (Enterprise)

Supported Identity Providers

SAML Setup

Just-in-Time (JIT) Provisioning

Session Management

Session Duration

Active Sessions

Security Best Practices

Troubleshooting

Can’t Login

2FA Code Not Working

Passkey Not Working

OAuth Login Failing

SAML Not Working

Next Steps