Skip to main content

Authentication Methods

Available options for users to sign in and/or verify their identity

Written by Margaret Greer
Updated over a week ago

Blink supports several ways for your users to sign in. From the Authentication section of the admin portal, you select which method your organization uses - and you can change it at any time.

What authentication methods does Blink support? Blink offers five sign-in methods: Email/SMS code (OTP), Password, SAML single sign-on (SSO), Microsoft 365 SSO, and Google SSO. You set the active method from Authentication in the Blink admin portal. SAML SSO requires a Pro or Enterprise plan - all other methods are available on every plan.

✅ Why the right authentication method matters

• Reduces sign-in friction for frontline workers who don't manage passwords

• Identity provider options (SAML, Microsoft 365, Google) mean one fewer credential to manage

• Switching methods requires users to take action - choosing carefully upfront avoids disruption

⚠️ Organization Admins only. Only Organization Admins can configure authentication settings in the Blink admin portal.

🔢 What is the Email/SMS code (OTP) method?

When a user signs in, Blink sends a 6-digit one-time passcode (OTP) to their email address or phone number via SMS. The user enters this code to access their account.

  • OTP codes look like 123-456 and expire after a short time

  • Users who sign in with a phone number always receive an OTP via SMS, regardless of which authentication method is set

  • No password to forget - well suited to frontline workers on shared devices

🔐 What is the Password method?

Users sign in with a password they create when they first register for Blink.

  • Password requirements: 6-10 characters, a mix of uppercase and lowercase letters, and at least one number

  • If a user forgets their password, an Organization Admin can send a password reset link from that user's profile in the admin portal

🏢 What is SAML single sign-on (SSO)?

When SAML is enabled, users sign in by entering their work email address. Blink authenticates them through your organization's identity provider - no separate Blink password required. Supports Microsoft Entra ID, Google Workspace, and any SAML 2.0-compliant provider.

📖 Ready to configure SAML? See How to set up SAML SSO for the full setup guide.

🪟 What is Microsoft 365 SSO?

When Microsoft 365 SSO is enabled, users see a Sign in with Microsoft button when registering or signing back in to Blink. Clicking it opens the Microsoft 365 sign-in page. Once authenticated, they are signed in to Blink.

🔵 What is Google SSO?

When Google SSO is enabled, users see a Sign in with Google button when registering or signing back in to Blink. Clicking it opens the Google sign-in page. Once authenticated, they are signed in to Blink.

⚠️ How do I switch authentication methods?

Go to Admin portal > Authentication, select the new method, and click Save changes. The change takes effect the next time users sign in - existing sessions are not immediately affected.

Switching from Email/SMS code to Password requires preparation. Once the change is made, users can no longer sign in with a 6-digit code. They must use a password instead.

  • Before switching, ensure all users have set a Blink password

  • Users without a password will need to go through the password reset flow to regain access

  • You can prompt users to set passwords in advance by sending a password reset link from each user's profile in the admin portal

🔒 SAML SSO requires a Pro or Enterprise plan. Email/SMS code, Password, Microsoft 365 SSO, and Google SSO are available on all plans. Contact your account manager to upgrade.


❓ FAQs

Can I have more than one authentication method active at the same time?

No. Blink uses one active authentication method at a time, set in the admin portal. All users in your organization use the same method.

Do users who sign in with a phone number use the same authentication method as email users?

No. Users who sign in with a phone number always receive a one-time passcode (OTP) via SMS, regardless of the authentication method set in the admin portal. The method setting only applies to email-based sign-in.

Which plan do I need for SAML SSO?

SAML SSO requires a Pro or Enterprise plan. All other authentication methods - Email/SMS code, Password, Microsoft 365 SSO, and Google SSO - are available on all plans. Contact your account manager if you want to enable SAML on Core.

What happens if I switch to Password and some users don't have a password yet?

Those users will not be able to sign in until they set a password. They can do this via the password reset flow. To avoid this, send password reset emails to all users from the admin portal before switching - this lets users set their password in advance.


🚀 What's next?

Now you know what's available, here's where to go next:

Did this answer your question?