Skip to content
Docs
Open Mammoth
Learn › Manage your workspace › Security: open the docs menu

Sign in, reset your Mammoth password and set up 2FA

Personal 2FA is part of the Pro plan; SSO, workspace-wide 2FA and IP allowlisting are set up by Mammoth on request · Updated 8 Nov 2026

You sign in to Mammoth with email and password, and can add two-factor authentication (2FA) in Profile Settings → Security on the Pro plan. SSO, workspace-wide 2FA and IP allowlisting aren't settings in the app: Mammoth sets them up on request.

Ways to sign in to Mammoth

Mammoth supports four authentication methods, managed through Keycloak, an identity provider (the service that checks who you are).

MethodUse case
Email / passwordIndividual users and small teams
Enterprise SSO (SAML/OIDC)Organisations with an existing identity provider (set up by Mammoth on request)
Two-factor authentication (TOTP)A second step on top of your password (Pro plan)
API tokenAutomated workflows, integrations and service accounts

Password requirements

  • At least 12 characters.
  • At least one letter.
  • At least one digit.
  • At least one symbol (except " and \).

Reset a forgotten password

  1. Click the forgot-password link on the sign-in page.
  2. Enter your email address.
  3. Open the temporary reset link in your email.
  4. Set a new password that meets the requirements above.

You can then sign in with the new password. To change your password while signed in, use Reset password under Security in Profile Settings.

Set up two-factor authentication

Two-factor authentication (2FA) adds a time-based one-time password (TOTP) from an authenticator app to your sign-in. Personal 2FA is part of the Pro plan. On the Free, Starter and Team plans, clicking Enable 2FA opens an upgrade prompt instead of the setup screen.

Important: Enabling 2FA is permanent and cannot be undone. Once enabled, two-factor authentication cannot be disabled on your account.

  1. Open your account menu in the left sidebar and select Profile Settings.
  2. Under Security, find the Two-factor authentication row.
  3. Click Enable 2FA.
  4. The Enable Two-Factor Authentication screen opens with the warning "This action can't be undone." Click Enable 2FA to confirm, or Cancel to go back.
  5. The page reloads. Follow the prompts to register your authenticator app.

The Two-factor authentication row shows 2FA Enabled. Every sign-in now asks for your password and a current one-time code.

Get SSO, workspace-wide 2FA or IP allowlisting

These aren't settings in the app. Mammoth sets them up on request: contact support@mammoth.io or your account manager.

FeatureWhat it does
Enterprise SSO (SAML/OIDC)Lets your organisation sign in with its existing identity provider
Workspace-wide 2FARequires 2FA for every member. New users have a 2-day grace period from account creation before they must set it up
IP allowlistingLimits sign-in to your organisation's network addresses
VPC deploymentRuns Mammoth in a private network. Also set up by Mammoth on request, not a setting in the app

When workspace-wide 2FA is turned on, the Activity Log shows it under Workspace with the detail "Two-factor authentication is now required for all users".

  • Security: sessions, encryption and certifications.
  • Your profile: change your password and turn on 2FA.
  • Audit logs: see when workspace-wide 2FA was turned on.
Was this page helpful?

Something wrong? support@mammoth.io