Shape includes several built-in security features that help protect your data and control how users access the platform. These options allow you to strengthen login security while still keeping the user experience simple and flexible.
Login Options in Shape
Users can log into Shape using a traditional email and password or by using a supported Single Sign-On (SSO) provider. These options allow teams to choose the login experience that best fits their organization’s security requirements.
Supported login methods include:
- Email and password
- Google SSO
- Azure (Microsoft) SSO
Two-Factor Authentication
Two-factor authentication adds an additional layer of security by requiring a one-time code after entering a password. This feature is strongly recommended for all users and can be enabled directly from the user profile settings.
When enabling two-factor authentication, users can choose:
- Email verification codes
- Text message verification codes
Text message verification is the recommended option for faster and more secure access. Once enabled, users must enter a verification code each time they log in before accessing the system.
IP Whitelisting for Login Control
IP whitelisting allows administrators to restrict where users can log in from by approving specific IP addresses. This is useful for organizations that want to limit access to office locations only.
With IP whitelisting enabled, you can:
- Require login validation by IP address
- Apply restrictions by user role
- Block access from unapproved locations
If a user attempts to log in from an IP address that is not on the approved list, access to Shape will be denied.
Single Sign-On (SSO) Configuration
Single Sign-On can be enabled by administrators through the API Integrations settings. Shape supports both Google SSO and Azure SSO for streamlined authentication.
SSO configuration allows users to:
- Log in using company-managed credentials
- Reduce password management overhead
- Improve security through centralized authentication
Azure SSO may require additional setup within your organization’s Azure environment, while Google SSO can be enabled directly within Shape.
Why This Video Matters
Security is critical when managing sensitive contact data, communication history, and customer records. Shape’s login and security settings give you the flexibility to balance ease of access with strong protection. By using two-factor authentication, IP whitelisting, and SSO, you can confidently control who accesses your system, how they log in, and where access is allowed.