---
title: "People overview"
description: "Manage accounts and groups, set up SSO and SCIM provisioning, set password, session, and two-factor rules, and create API keys."
url: "https://www.metabase.com/docs/latest/people-and-groups/start"
version: "65"
---

# People overview

User accounts, groups, and authentication. For permissions, see [Permissions overview](https://www.metabase.com/docs/latest/permissions/start.md).

## [Editing your account settings](https://www.metabase.com/docs/latest/people-and-groups/account-settings.md)

Edit your profile and password, and view your login history.

## [Managing people and groups](https://www.metabase.com/docs/latest/people-and-groups/managing.md)

Admin controls for setting up user accounts and organizing them into groups.

## [Changing password complexity](https://www.metabase.com/docs/latest/people-and-groups/changing-password-complexity.md)

Make people use longer and more complex passwords.

## [Changing session expiration](https://www.metabase.com/docs/latest/people-and-groups/changing-session-expiration.md)

Tell Metabase how long it should wait before asking people to log in again.

## [Two-factor authentication](https://www.metabase.com/docs/latest/people-and-groups/two-factor-authentication.md)

Have people confirm their identity with an authenticator app when they log in.

## Authentication

Metabase offers several options for authentication.

### SSO for Metabase Open Source and Starter plans

- [Google Sign-in](https://www.metabase.com/docs/latest/people-and-groups/google-sign-in.md)
- [LDAP](https://www.metabase.com/docs/latest/people-and-groups/ldap.md)

### SSO for Metabase Pro and Enterprise plans

With [Pro and Enterprise plans](https://www.metabase.com/pricing), you have more options to help orchestrate lots of people and groups.

- [JWT][jwt]
- LDAP advanced features
  - [Group membership filter](https://www.metabase.com/docs/latest/people-and-groups/ldap.md#group-membership-filter)
  - [Syncing user attributes](https://www.metabase.com/docs/latest/people-and-groups/ldap.md#syncing-user-attributes-with-ldap)
- [OIDC][oidc]
  - [Keycloak][oidc-keycloak]
- [SAML][saml]
  - [Auth0][saml-auth0]
  - [Microsoft Entra ID][azure-ad]
  - [Google][saml-google]
  - [Keycloak][saml-keycloak]
  - [Okta][saml-okta]

## [API keys](https://www.metabase.com/docs/latest/people-and-groups/api-keys.md)

Create keys to authenticate API calls.

## [User provisioning](https://www.metabase.com/docs/latest/people-and-groups/user-provisioning.md)

Metabase supports user provisioning via the SCIM protocol.

[oidc]: https://www.metabase.com/docs/latest/people-and-groups/authenticating-with-oidc.md
[oidc-keycloak]: https://www.metabase.com/docs/latest/people-and-groups/oidc-keycloak.md
[azure-ad]: https://www.metabase.com/docs/latest/people-and-groups/saml-azure.md
[google-sign-in]: https://www.metabase.com/docs/latest/people-and-groups/google-and-ldap#enabling-google-sign-in
[jwt]: https://www.metabase.com/docs/latest/people-and-groups/authenticating-with-jwt.md
[ldap]: https://www.metabase.com/docs/latest/people-and-groups/google-and-ldap#enabling-ldap-authentication
[ldap-group-membership-filter]: https://www.metabase.com/docs/latest/people-and-groups/google-and-ldap#ldap-group-membership-filter
[ldap-user-attributes]: https://www.metabase.com/docs/latest/people-and-groups/google-and-ldap#syncing-user-attributes-with-ldap
[saml-okta]: https://www.metabase.com/docs/latest/people-and-groups/saml-okta.md
[saml]: https://www.metabase.com/docs/latest/people-and-groups/authenticating-with-saml.md
[saml-auth0]: https://www.metabase.com/docs/latest/people-and-groups/saml-auth0.md
[saml-google]: https://www.metabase.com/docs/latest/people-and-groups/saml-google.md
[saml-keycloak]: https://www.metabase.com/docs/latest/people-and-groups/saml-keycloak.md
[sso-def]: https://www.metabase.com/glossary/sso