Bigmind offers multiple authentication methods to provide secure and convenient access to your account. Choose the login method that best fits your organization's security requirements and user preferences.
Available Login Methods
Bigmind supports several authentication options:
Email and Password
- Traditional Authentication: Standard email and password combination
- Password Requirements: Strong password policies with complexity requirements
- Password Reset: Self-service password reset via email
- Account Recovery: Multiple recovery options for account access
Single Sign-On (SSO)
- Google Workspace: Sign in with your Google/Gmail account
- Microsoft Azure AD: Integrate with Office 365 and Azure Active Directory
- SAML 2.0: Support for enterprise SAML identity providers
- OIDC: OpenID Connect for modern authentication flows
Multi-Factor Authentication (MFA)
- SMS Verification: Receive verification codes via text message
- Authenticator Apps: Use Google Authenticator, Authy, or similar apps
- Email Verification: Backup verification via email
- Hardware Tokens: Support for FIDO2/WebAuthn security keys
Setting Up Login Methods
Email and Password Setup
- Visit the Bigmind sign-up page
- Enter your email address and create a strong password
- Verify your email address through the confirmation link
- Complete your profile setup
- Access your organization or create a new one
Google SSO Configuration
- Click "Sign in with Google" on the login page
- Authorize Bigmind to access your Google account
- Complete any additional profile information
- Your account is linked to your Google credentials
Microsoft SSO Integration
- Select "Sign in with Microsoft"
- Authenticate with your Microsoft/Office 365 account
- Grant necessary permissions for calendar and contact access
- Complete the organization setup if you're the first user
Multi-Factor Authentication Setup
Enabling MFA
- Go to Settings > Profile > Security
- Click "Enable Two-Factor Authentication"
- Choose your preferred MFA method
- Follow the setup instructions for your chosen method
- Save your backup codes in a secure location
Authenticator App Setup
- Download Google Authenticator, Authy, or similar app
- Scan the QR code displayed in Bigmind
- Enter the 6-digit code from your authenticator app
- Confirm the setup and save backup codes
Hardware Security Key Setup
- Ensure you have a FIDO2/WebAuthn compatible security key
- Select "Hardware Security Key" in MFA settings
- Insert your security key when prompted
- Touch the security key to complete registration
- Test the key by signing out and signing back in
Enterprise SSO Configuration
SAML Integration
For enterprise customers with existing identity providers:
- Identity Provider Setup: Configure Bigmind as a service provider in your IdP
- Metadata Exchange: Import IdP metadata and export SP metadata
- Attribute Mapping: Map user attributes (name, email, groups)
- Testing: Validate the integration with test users
- User Provisioning: Set up automatic user creation and deactivation
SCIM Provisioning
- Automatic User Management: Sync users from your directory
- Group Synchronization: Map directory groups to Bigmind roles
- Lifecycle Management: Automatic user creation, updates, and deactivation
- Audit Logging: Track all provisioning activities
Session Management
Session Duration
- Default Session: 30 days for regular logins
- Remember Me: Extended sessions up to 90 days
- Automatic Timeout: Sessions expire after extended inactivity
- Concurrent Sessions: Multiple device login support
Session Security
- Device Tracking: Monitor active sessions across devices
- Location Verification: Alert on logins from new locations
- IP Restrictions: Optionally restrict access by IP address
- Force Logout: Administrators can terminate user sessions
Password Management
Password Requirements
- Minimum Length: At least 8 characters (12+ recommended)
- Complexity: Mix of uppercase, lowercase, numbers, and symbols
- Common Password Protection: Prevention of commonly used passwords
- Password History: Cannot reuse last 5 passwords
Password Reset Process
- Click "Forgot Password" on the login page
- Enter your email address
- Check your email for the reset link
- Follow the link and create a new password
- Sign in with your new password
Password Security Best Practices
- Use Unique Passwords: Don't reuse passwords across services
- Password Managers: Use tools like 1Password, LastPass, or Bitwarden
- Regular Updates: Change passwords periodically
- Avoid Common Patterns: Don't use predictable character substitutions
Organization-Level Authentication
Authentication Policies
Organization administrators can configure:
- Required MFA: Mandate two-factor authentication for all users
- SSO Enforcement: Require SSO login for organization members
- Password Policies: Set custom password requirements
- Session Policies: Configure session duration and timeout settings
User Provisioning
- Automatic Enrollment: New users automatically join designated organizations
- Role Assignment: Default roles based on directory group membership
- Email Domain Verification: Automatic organization assignment by email domain
- Invitation System: Controlled user invitation and onboarding
Login Troubleshooting
Common Login Issues
Cannot Sign In
- Check Credentials: Verify email address and password are correct
- Account Status: Ensure account hasn't been suspended or deactivated
- Browser Issues: Clear cookies and cache, try incognito mode
- Network Problems: Check internet connection and firewall settings
MFA Problems
- Authenticator Sync: Ensure device time is synchronized
- Backup Codes: Use backup codes if primary MFA method fails
- Lost Device: Contact administrator to reset MFA settings
- Code Not Working: Wait for next code or check app configuration
SSO Issues
- Identity Provider Problems: Check IdP status and configuration
- Permission Errors: Verify user has necessary permissions in directory
- Attribute Mapping: Ensure required attributes are being sent
- Certificate Errors: Check SAML certificate validity
Security Best Practices
Account Security
- Enable MFA: Always use two-factor authentication
- Monitor Sessions: Regularly review active sessions and devices
- Strong Passwords: Use unique, complex passwords
- Regular Audits: Review login activity and suspicious access
Organization Security
- SSO Implementation: Use enterprise SSO for centralized control
- User Lifecycle: Implement proper onboarding and offboarding
- Access Reviews: Regularly review user access and permissions
- Security Training: Educate users on authentication best practices
Compliance and Auditing
Authentication Logs
- Login Events: Complete log of all authentication attempts
- Failed Attempts: Track and alert on suspicious login activity
- Session Activity: Monitor user sessions and device changes
- Administrative Actions: Log all authentication policy changes
Compliance Features
- SOC 2 Compliance: Regular security audits and certifications
- GDPR Compliance: Data protection and privacy controls
- ISO 27001: Information security management standards
- Audit Trails: Comprehensive logging for compliance reporting
Getting Help
Support Resources
- Self-Service: Password reset and basic troubleshooting options
- Help Documentation: Comprehensive guides for setup and troubleshooting
- Support Team: Contact support for authentication issues
- Administrator Tools: Organization admins can assist with user access
Emergency Access
- Backup Codes: Use saved backup codes for MFA bypass
- Alternative Methods: Try different authentication methods if available
- Administrator Recovery: Organization admins can reset user authentication
- Support Contact: Reach out to Bigmind support for account recovery