Skip to main content

Authentication & Session Policy

Written by Reut Barak

Sign-in methods

  • Email + password

  • Sign in with Google: Google OAuth 2.0 / OpenID Connect (OIDC). Salto never receives or stores Google passwords; Google signs the user in and sends Salto a signed identity token.

  • SAML SSO for enterprise: link to the Single Sign-On (SSO) sub-section.

Enforce password requirements for email-based login to Salto

Salto allows users to log in with an email and password. These settings help ensure your organization uses strong, unique credentials.

We enforce the following policy:

  • Special characters (!@#$%^&)

  • Lower and upper case letters and numbers (a-z, A-Z, 0-9)

  • A minimum character length (configurable)

  • Non-empty password requirement

When enabled, Salto maintains a password history per user and prevents reuse of any password included in that history.

Did this answer your question?