PDQ's new identity/auth service is scheduled to go live on October 7th. This documentation is posted in advance of this release for planning purposes, and while we do not expect any major changes, it is not yet final.
Overview
PDQ Account owners and administrators can require specific authentication methods and MFA options for all team members within their organization.
These settings can be configured by logging into the billing portal and navigating to the Account page:
https://portal.pdq.com/account
Authentication and MFA methods can be enabled and disabled here.
Note that if an account is using “Password-less with email authentication” it is required that the account has some form of MFA enabled.
Set login session duration
By default, a session (the duration which the user is “logged in”) is valid for 10 days. This can be changed in the “Require log in after (seconds)” option. This value is in seconds, so the default value of 10 days would be 864000.
Configure OpenID Connect (OIDC) settings
Account owners and administrators can set up OpenID Connect (OIDC) on the same Account page from above:
https://portal.pdq.com/account
In the OIDC Settings section, enter the OIDC settings from your provider, including:
- Discovery Document URI
- Client ID
- Client Secret
After you have entered these values, you may switch on OIDC in the Allowed Authentication Methods section above.
Here is an example configuration which allows OIDC login and no other methods.
