> For the complete documentation index, see llms.txt.
Skip to main content

Check out Port for yourself ➜ 

Authentication and access

You can control how your members, API clients, and Port's support team access your organization. This page describes authentication options, session settings, and support access controls.

Multi-factor authentication​

In addition to password and social login, multi-factor authentication (MFA) adds a layer of protection against unauthorized data access. Port encourages you to use MFA. When you integrate Port with your single sign-on (SSO) provider, you benefit from that provider's policies and MFA protection.

Single sign-on (SSO)​

Port integrates with all major SSO providers to import users and teams and manage your organization's access to Port.

Port supports OpenID Connect (OIDC) and Security Assertion Markup Language (SAML) 2.0, supporting modern identity providers.

Session timeout​

Admins can configure an inactivity timeout that signs members out of the Port application. The timeout is off by default and applies to every member of your company.

To configure it:

  1. Click your profile picture and select Settings.

  2. Under Access & SSO, select Sessions.

  3. Turn on the Inactivity timeout toggle.

  4. Set Sign out after and choose a Unit: Seconds, Minutes, or Hours. The field defaults to 5 minutes. The minimum is 10 seconds.

  5. Click Save.

Activity in any open Port tab resets the timer. Port shows a warning about 10 seconds before signing a member out. To disable the timeout, turn off the toggle and click Save.

UI only

The inactivity timeout applies only to the Port application. Members can still interact with Port through the API or Model Context Protocol (MCP) after the Port application signs them out.

REST API authentication​

Port's REST API uses a JSON Web Token (JWT) for authentication. You generate the token by making an authentication request with a unique client ID and client secret, then pass it in the Authorization header for API requests.

Support user access​

Port's support team may require access to your organization to provide technical assistance. You control this from Settings.

To change support user access:

  1. Click your profile picture and select Settings.
  2. In the Organization section of the Settings window, select Port Support Access.
  3. Use the Enable support user access toggle, then click Save.

Support access has the following controls and limitations:

  • Support user actions are not logged in your audit log.
  • You can set the access duration or disable support access completely.
  • Emergency access requires approval from both your organization and Port.

For details, see support user permissions.