Auth for Self-Hosting

---

Overview

A self-hosted CloudAEye deployment supports email and password login, 2-step verification, and tenant-managed password policies. Self-hosting administrators configure the authentication providers for the deployment, while tenant administrators control which configured methods their workspace allows.

For the complete user and tenant-administrator procedures, see Register with CloudAEye SaaS.

Login and 2-Step Verification

Users sign in with an authentication method allowed by their tenant. Email and password users can secure their account with TOTP 2-step verification using an authenticator application and backup codes. Google Authenticator, Microsoft Authenticator, Authy, 1Password, and Bitwarden are common options. Any standards-based TOTP authenticator application will work.

Users manage this feature under Settings > 2-Step Verification. Tenant owners and administrators can enable Require 2-step verification on the same tab. When enabled, password users must enroll and cannot disable it. Enterprise SSO providers continue to enforce their own verification policies.

See Login and 2-Step Verification and Configure tenant-wide 2-step verification.

Password lifecycle

Email and password accounts support forgot-password, password reset, and authenticated password changes. Tenant administrators can configure a password age of 30, 60, 90, 180, or 365 days.

The password age can be used as a reminder or as an enforced expiration. When expiration is enforced, the user must change an expired password before accessing the workspace.

See Password lifecycle and Configure password expiration.

Password strength

Tenant owners and administrators can configure the minimum password length and require uppercase letters, lowercase letters, and special characters. The registration, reset-password, and change-password pages show the active policy as a live requirements checklist.

See Password strength and Configure password length and complexity.

Settings Tabs

Authentication management uses these CloudAEye tabs:

Tab	Purpose
Password Management	Password changes, automatic logout, password strength, and password lifecycle
2-Step Verification	User authenticator setup, backup codes, and the tenant-wide requirement
Single Sign On	OIDC or SAML SSO configuration and SCIM provisioning