Authentication Overview

View options for user authentication and provisioning

Secure your Verkada Command organization with multiple authentication options. Choose the method that best fits your security requirements.

---

Choose your authentication method

Method	Best for	Security level
Two-Factor Authentication	Quick security boost for password-based login	Medium
Passkeys	Passwordless login using device biometrics	High
Single Sign-On (SSO)	Enterprise organizations using identity providers	High
Enterprise Controlled Encryption	Maximum security with customer-managed keys	Maximum

Verkada recommends enabling SSO with OIDC for the best balance of security and user experience.

---

Authentication methods

By default, users use their email and password to log in. To enhance security, several additional login options are available.

OpenID Connect (OIDC)

OIDC is an authentication protocol built on OAuth 2.0 that enables secure user identity verification. It allows applications to authenticate users through a trusted identity provider (IdP) without storing credentials. OIDC enhances security by providing standardized identity tokens, enabling single sign-on (SSO) and seamless platform integration.

Verkada recommends enabling OIDC instead of SAML when available.

SAML/OAuth

SAML allows you to log in using a third-party authenticating service, such as Okta, Microsoft Entra ID, Google Workspace, or OneLogin. This method provides a single point of management for authentication across multiple applications.

Verkada Command is compatible with any SAML 2.0 provider. Learn more about setting up identity providers.

2-Factor Authentication

2-Factor Authentication (2FA) requires you to retrieve a code via SMS or through an authenticator app to log in. See Two-Factor Authentication for detailed setup instructions.

---

Provisioning

SCIM

If you have a large number of users, you may opt to use System for Cross-Domain Identity Management (SCIM) to automatically provision and manage users. This is particularly advantageous if your company uses Microsoft Entra ID or Okta as your Identity Provider.

SCIM allows you to sync users and groups between Verkada Command and your IdP, where you can easily add, remove, or modify multiple users and groups simultaneously.

See the Identity Providers section for detailed SCIM setup instructions.

---

Prefer to see it in action? Check out the video tutorial.