Authentication Methods
Namespace supports multiple authentication methods to accommodate different organizational requirements and security policies.Social Login Options
Google SSO: Members can sign in using their Google accounts, providing seamless integration with Google Workspace environments. GitHub SSO: Authenticate using GitHub credentials, ideal for development teams already using GitHub for version control.Enterprise Authentication
SAML SSO: Available for enterprise customers, SAML single sign-on provides integration with your organization’s identity provider such as Okta, OneLogin, or Auth0. Enterprise customers can configure advanced SAML SSO options for enhanced security and user management:Automatic Workspace Joining
Configure your SAML SSO integration to automatically grant workspace access to any member from your organization who authenticates through your identity provider. You can configure a default role that new members assume on workspace signup. This streamlines onboarding and ensures all team members have appropriate access.Enforced SSO Authentication
Enhance security by requiring all workspace members to sign in exclusively through your organization’s identity provider, ensuring consistent security policies across your organization. When this option is enabled, social login methods (Google and GitHub) are disabled for all workspace members.Custom Session Durations
Configure custom session durations for SAML SSO logins to meet your organization’s security requirements. Once the maximum session length (default is one hour) is reached, re-authentication is required. Namespace also supports different session policies for different user roles.Group-Based Role Updates (SCIM)
Namespace supports directory sync via SCIM, allowing you to manage workspace membership and roles directly from your identity provider. When a directory sync is configured, group membership changes in your identity provider automatically propagate to Namespace: users are added or removed from the workspace, and their workspace roles are updated based on the group-to-role mapping. Once directory sync is set up, management of the group-to-role mapping is self-service. From the managed SSO domain entry in your workspace settings, workspace owners and admins can click Manage Groups to open the directory-sync admin portal and configure how identity provider groups map to Namespace roles. Directory role mappings can assign the Admin, Editor, Devbox User, Accountant, or Reader role. To enable directory sync for your workspace, contact our support team.Adding Members
You can invite new members to your workspace manually using two convenient methods. Any invite expires after a week unless revoked by the inviter ahead of time. If your workspace is connected to your organization’s identity provider, you can also grant workspace access to any member from your organization.Invite Links
- Navigate to your workspace settings
- Choose “Generate link”
- Share the link with the new workspace member
Invite Emails
- Navigate to your workspace settings
- Choose “Invite by email”
- Enter the email addresses to invite
Role-Based Access Control (RBAC)
Namespace supports comprehensive role-based access control with six distinct roles, each providing different levels of access and permissions:Supported Roles
- Owner: Full administrative control, main contact point, cannot be removed from the workspace
- Admin: Full administrative control
- Editor: Can modify workspace content and configurations
- Devbox User: Can create, use, and manage their own Devboxes
- Accountant: Access to billing and usage information
- Reader: View-only access to workspace resources