> ## Documentation Index
> Fetch the complete documentation index at: https://developers.nlpearl.ai/llms.txt
> Use this file to discover all available pages before exploring further.
# Account Security Settings
> Manage session timeout, audit logs, two-factor authentication, and enterprise access controls.
***
Use account security settings to manage how users access your workspace, how long sessions stay active, and how administrators review important account activity.
Automatically log users out after a period of inactivity.
Add an extra verification step when users log in.
Track workspace activity and security-related events.
Connect enterprise identity providers through Single Sign-On.
***
## Customizing Your Session Timeout
You can configure how long a session remains active before the user is automatically logged out due to inactivity. This helps protect your account if you forget to log out, especially when using a shared or public device.
On our platform, you can set the session timeout duration in **minutes**, with a minimum of **30 minutes** and a maximum of **3 days**. To adjust this setting, go to **Workspace > General Settings**, update the **Session Timeout** field, and click **Update**.
Shorter session timeouts are recommended for shared devices, public computers, or workspaces with stricter security policies.
***
## Reviewing Workspace Activity with Audit Logs
The **Audit Log** helps administrators review important activity and security events in the workspace. It is useful for monitoring sign-ins, configuration changes, published Pearls, and other account-level events.
To access it, go to **Workspace > Audit Log**.
The audit log includes:
* **Timestamp**: when the event happened.
* **Event Type**: the kind of action recorded, such as a successful login or published Pearl.
* **User**: the workspace member who triggered the event.
* **Details**: additional context about the action, when available.
Use the date range and event type filters to narrow the audit log when investigating a specific time period or activity.
***
## Enterprise Single Sign-On (SSO)
Single Sign-On (SSO) is available for Enterprise workspaces. It allows your team to authenticate through your company identity provider and centralize access management.
To enable SSO for your workspace, contact us at [support@nlpearl.ai](mailto:support@nlpearl.ai). Please include your workspace name, company domain, and preferred identity provider if available.
***
## Setting Up Two-Factor Authentication (2FA)
Two-Factor Authentication (2FA) adds an additional step to the login process to strengthen your account’s security. Instead of relying solely on your password, which could be guessed, leaked, or stolen, 2FA requires a second form of verification that only you should have access to.
Typically, this second factor is a temporary code generated by a mobile app like Google Authenticator. Alternatively, you can receive the code by **SMS** or **email**, depending on your preferences and the contact details you provided during signup. Even if someone knows your password, they won’t be able to access your account without that second code. That’s why 2FA is a simple and highly effective way to safeguard your data.
In this guide, we’ll show you exactly how to activate and use Two-Factor Authentication on our platform.
***
### How to Set Up 2FA on the Platform
Click on your profile icon located at the bottom-left corner of the sidebar (marked as 1 in the image).
Then, in the top navigation bar, click on the **Advanced** tab (marked as 2).
In the left-hand menu, under **Advanced**, select **Platform Security**, then go to the **Security** tab.
Find the section labeled **Two-Factor Authentication**.\
Click on **Set Up Authentificator**.
If you haven’t already, download an app like **Google Authenticator** on your mobile device.
Open the authenticator app.\
Tap the **+** icon and select **Scan a QR Code**.
Use your camera to scan the QR code displayed on the platform.
Your app will generate a 6-digit code that refreshes every few seconds.\
Enter this code on the platform to validate and finalize the setup.
Once verified, 2FA will be enabled.\
You can toggle 2FA on or off at any time in this section.
When active, you will be required to enter a verification code at each login.
***
### After Activation: How 2FA Works
* Every time you log into your account, you will be prompted to enter a verification code.
* You can retrieve this code from your authenticator app.
* Alternatively, you can receive the code via **SMS**, depending on the method you have set up.
