Skip to main content

Authentication Methods

Available options for users to sign in and/or verify their identity

Written by Margaret Greer
Updated today

Blink supports several ways for your users to sign in. From the Authentication section of the admin portal, you select which method your organization uses - and you can change it at any time.

What authentication methods does Blink support? Blink offers five sign-in methods: Email/SMS code (OTP), Password, SAML single sign-on (SSO), Microsoft 365 SSO, and Google SSO. You set the active method from Authentication in the Blink admin portal. SAML SSO requires a Pro or Enterprise plan - all other methods are available on every plan.

✅ Why the right authentication method matters

• Reduces sign-in friction for frontline workers who don't manage passwords

• Identity provider options (SAML, Microsoft 365, Google) mean one fewer credential to manage

• Switching methods requires users to take action - choosing carefully upfront avoids disruption

⚠️ Organization Admins only. Only Organization Admins can configure authentication settings in the Blink admin portal.

🔢 What is the Email/SMS code (OTP) method?

When a user signs in, Blink sends a 6-digit one-time passcode (OTP) to their email address or phone number via SMS. The user enters this code to access their account.

  • OTP codes look like 123-456 and expire after a short time

  • Users who sign in with a phone number always receive an OTP via SMS, regardless of which authentication method is set

  • No password to forget - well suited to frontline workers on shared devices

🔐 What is the Password method?

Users sign in with a password they create when they first register for Blink.

  • Password requirements: 6-10 characters, a mix of uppercase and lowercase letters, and at least one number

  • If a user forgets their password, an Organization Admin can send a password reset link from that user's profile in the admin portal

🏢 What is SAML single sign-on (SSO)?

When SAML is enabled, users sign in by entering their work email address. Blink authenticates them through your organization's identity provider - no separate Blink password required. Supports Microsoft Entra ID, Google Workspace, and any SAML 2.0-compliant provider.

📖 Ready to configure SAML? See How to set up SAML SSO for the full setup guide.

🪟 What is Microsoft 365 SSO?

When Microsoft 365 SSO is enabled, users see a Sign in with Microsoft button when registering or signing back in to Blink. Clicking it opens the Microsoft 365 sign-in page. Once authenticated, they are signed in to Blink.

🔵 What is Google SSO?

When Google SSO is enabled, users see a Sign in with Google button when registering or signing back in to Blink. Clicking it opens the Google sign-in page. Once authenticated, they are signed in to Blink.

⚠️ How do I switch authentication methods?

Go to Admin portal > Authentication, select the new method, and click Save changes. The change takes effect the next time users sign in - existing sessions are not immediately affected.

Switching from Email/SMS code to Password requires preparation. Once the change is made, users can no longer sign in with a 6-digit code. They must use a password instead.

  • Before switching, ensure all users have set a Blink password

  • Users without a password will need to go through the password reset flow to regain access

  • You can prompt users to set passwords in advance by sending a password reset link from each user's profile in the admin portal

🔒 SAML SSO requires a Pro or Enterprise plan. Email/SMS code, Password, Microsoft 365 SSO, and Google SSO are available on all plans. Contact your account manager to upgrade.


❓ FAQs

Can I have more than one authentication method active at the same time?

No. Blink uses one active authentication method at a time, set in the admin portal. All users in your organization use the same method.

Do users who sign in with a phone number use the same authentication method as email users?

No. Users who sign in with a phone number always receive a one-time passcode (OTP) via SMS, regardless of the authentication method set in the admin portal. The method setting only applies to email-based sign-in.

Which plan do I need for SAML SSO?

SAML SSO requires a Pro or Enterprise plan. All other authentication methods - Email/SMS code, Password, Microsoft 365 SSO, and Google SSO - are available on all plans. Contact your account manager if you want to enable SAML on Core.

What happens if I switch to Password and some users don't have a password yet?

Those users will not be able to sign in until they set a password. They can do this via the password reset flow. To avoid this, send password reset emails to all users from the admin portal before switching - this lets users set their password in advance.


🚀 What's next?

Now you know what's available, here's where to go next:

Did this answer your question?