> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getstrada.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication Management

> Authentication methods for accessing Strada

## Overview

Strada supports multiple authentication methods to provide secure and flexible access for your team members. Choose the authentication method that best fits your organization's security requirements and user experience preferences.

***

## Available Authentication Methods

### Magic Link

Magic Link authentication provides a passwordless login experience. Users receive a secure, time-limited link via email that grants them access to their account.

**How it works:**

1. User enters their email address on the login page
2. Strada sends a unique authentication link to their email
3. User clicks the link to instantly log in
4. No password required

**Benefits:**

* Simple and secure passwordless authentication
* No password management overhead
* Reduced risk of password-related security issues
* Quick and convenient for users

**Best for:**

* Teams that prefer passwordless authentication
* Organizations looking to simplify user onboarding
* Users who access Strada infrequently

***

### OAuth

OAuth authentication allows users to sign in using their existing accounts from trusted identity providers like Google, Microsoft, or other OAuth-compatible services.

**How it works:**

1. User clicks on their preferred OAuth provider (e.g., "Sign in with Google")
2. User is redirected to the provider's login page
3. After successful authentication with the provider, user is redirected back to Strada
4. Strada verifies the OAuth token and grants access

**Benefits:**

* Leverage existing identity providers
* Single sign-on experience across platforms
* Simplified credential management
* Quick account creation and login

**Best for:**

* Teams already using Google Workspace or Microsoft 365
* Organizations wanting to reduce password management
* Users comfortable with social login patterns

***

### Single Sign-On (SSO)

Enterprise SSO enables centralized authentication through your organization's identity provider (IdP) like Okta, Azure AD, or other SAML-compatible systems.

**How it works:**

1. User clicks "Sign in with SSO" on the login page
2. User is redirected to your organization's IdP for authentication
3. After successful authentication, user is redirected back to Strada
4. Access is managed centrally through your IdP

**Benefits:**

* Centralized user management and access control
* Enhanced security with your organization's policies
* Automated user provisioning and deprovisioning
* Compliance with enterprise security requirements
* Support for multi-factor authentication (MFA)

**Best for:**

* Enterprise organizations with existing IdP infrastructure
* Teams requiring centralized access control
* Organizations with strict security and compliance requirements

**Supported Identity Providers:**

* [Okta](/get-started/login/sso-with-okta)
* [Microsoft Entra (Azure AD)](/get-started/login/sso-with-microsoft-entra)
* [Google Workspace](/get-started/login/sso-with-google-workspace)
* [Any SAML 2.0 compatible IdP](/get-started/login/sso-with-other-providers)

To set up SSO, contact your Strada administrator for configuration assistance.

***

## Choosing the Right Method

| Method     | Best For                      | Security Level | Setup Complexity |
| ---------- | ----------------------------- | -------------- | ---------------- |
| Magic Link | Individual users, small teams | High           | Low              |
| OAuth      | Teams using Google/Microsoft  | High           | Low              |
| SSO        | Enterprise organizations      | Very High      | Medium           |

***

## Getting Help

For assistance with authentication setup or troubleshooting login issues, contact your Strada administrator.