MFA & SSO

Use account and workspace security controls to reduce the risk of unauthorised access.

Personal two-factor authentication

Every member can enable two-factor authentication under Settings → Account.

1. Open Settings → Account
2. Start two-factor authentication setup
3. Scan the QR code with an authenticator app
4. Confirm a current six-digit code
5. Store the ten recovery codes securely

Recovery codes are shown for emergency account access. Keep them outside Ardela and away from the device used for authentication.

Enforced MFA

Enterprise workspace admins can require MFA for active members under Settings → MFA & SSO. Members who have not completed setup must do so before continuing into protected workspace areas.

SAML SSO

Enterprise workspaces can configure SAML single sign-on with their identity provider. Coordinate the setup and testing with your firm's IT owner and Ardela support before enforcing the new sign-in path.

Activity log

Authorised Enterprise users can review extended activity information under Settings → Activity Log. Use it alongside identity-provider, device, and firm records when investigating an event.

Operational guidance

• Do not share accounts or recovery codes
• Deactivate leavers promptly
• Review workspace owners, admins, and custom roles regularly
• Sign out after using a shared workstation
• Report suspicious access to your firm and Ardela support

Related

• Security overview
• UK data and compliance
• Permissions and roles