> ## Documentation Index
> Fetch the complete documentation index at: https://support.legora.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Sign-in and authentication

> Find out how signing in to Legora works for your organization, and where to go to sign in, fix a sign-in problem, or set up authentication.

## Overview

This page explains how signing in to Legora works and points you to the right article for your task.

Your organization decides how its members sign in. Members sign in with single sign-on (SSO) through the organization’s identity provider, with an email address and password, or with either. Organizations can also require two-factor authentication for password sign-ins.

Legora is moving organizations from regional authentication to Legora’s global authentication. New organizations start on Legora’s global authentication. On regional authentication, Legora support manages sign-in settings. On Legora’s global authentication, Admins manage them themselves.

## Which sign-in system does your organization use?

Some steps depend on the sign-in system your organization uses. You can tell from the address you sign in at.

| | Regional authentication | Legora’s global authentication |
| - | - | - |
| Sign-in address | A regional URL: `app.eu.legora.com`, `app.us.legora.com`, `app.ap.legora.com`, or `app.au.legora.com` | [app.legora.com](https://app.legora.com), then your organization’s dedicated URL, such as `acme.app.legora.com` |
| Password reset | A reset link by email | A one-time code by email |
| Minimum password length | 12 characters | 15 characters |
| Too many wrong passwords | Sign-in shows **Account Blocked** | Sign-in pauses for a short time |
| Who manages SSO, two-factor authentication, and IP restrictions | Legora support | Admins, in **Settings** > **Authentication** |
| Mobile app region | Your region | **Global** |

## For everyone

These articles help you sign in and fix sign-in problems:

* [Why can I not log in to Legora?](/why-can-i-not-log-in-to-legora): Fixes for common sign-in errors, password resets, and SSO problems.
* [How do I change the way I log in to Legora?](/how-do-i-change-the-way-i-log-in-to-legora): Who decides how you sign in.

## For Admins and IT

These articles cover authentication settings and identity provider setup:

* [How do I manage authentication for my organization?](/how-do-i-manage-authentication-for-my-organization): Sign-in methods, two-factor authentication, session timeout, IP restrictions, and SSO connections.
* [Integration Overview - Entra ID Single Sign-on](/integration-overview-entra-id-single-sign-on): Set up SSO with Microsoft Entra ID.
* [SAML SSO Integration Guide](/saml-sso-integration-guide): Set up SSO with a SAML 2.0 identity provider.
* [Directory Sync](/how-to-set-up-directory-sync-scim): Provision members and groups from Microsoft Entra ID or Okta.
* [Enabling the Azure AD integration for your organization](/enabling-the-azure-ad-integration-for-your-organization): Sync Entra ID group membership into Legora groups.
* [Legora network and domain requirements](/legora-network-and-domain-requirements): Domains to allow on your network, including sign-in domains.

## Moving to Legora’s global authentication

These articles cover the move from regional authentication to Legora’s global authentication:

* [IT Admin guide: Legora’s global authentication](/it-admin-guide-legora-s-new-authentication-protocol): The full migration task list, from identity provider updates to cutover.
* [Migration action required: callback URLs and allowlist updates](/migration-action-required-callback-urls-and-allowlist-updates): Callback URLs and domains to add before cutover.