Access & Authentication

Overview

This section covers the options available when administering users, how they access Sublime, and what they can see within Sublime.

Single Sign On (SSO) Options

Role-Based Access Control

Message Access Controls

SCIM

Customer Account Access

Local account passwords

Local accounts sign in with an email address and a password stored in Sublime. When someone signs in through SSO, their identity provider checks their credentials and these rules play no part. If your organization also allows email and password sign-in, these rules apply to any Sublime password a user sets.

Sublime checks the following requirements each time someone sets or changes a password:

  • Length: 15 to 72 characters. Sublime counts bytes, so a multibyte character such as an emoji counts as more than one.
  • Whitespace: no spaces, tabs, or other whitespace at the start or end of the password.

Existing passwords keep working until someone changes them.