Skip to content

The Lovable Feature AtlasIndependent community catalog

Atlas
Security

Workspace Authentication Policy

GASecurityReleased Apr 2026Business and Enterprise plansSource: docs.lovable.dev

Workspace Authentication Policy is Lovable's Security feature: Configure which sign-in methods (email, Google, Apple, SAML) are allowed.

Workspace Authentication Policy controls which sign-in methods (email, phone, Google, Apple, SAML) are permitted across the workspace. Surfaced in Security Center.

Example workflows

Starting points built from this record, not transcripts of a run. Each prompt is written the way it should be sent, as one paragraph, and each is worth editing before you send it.

  1. Stand it up from scratch

    You have read the record and want Workspace Authentication Policy working in a real project rather than a sandbox.

    Set up Workspace Authentication Policy in this project — configure which sign-in methods (email, Google, Apple, SAML) are allowed. Walk it end to end, tell me exactly what you changed, and flag anything I have to switch on myself before it works.

    Expected outcome

    A working setup, a plain list of what changed, and a short list of anything left for you to switch on. Check that list before assuming it is done.

  2. Forcing SSO-only org sign-in

    The record lists this as one of the jobs Workspace Authentication Policy is meant for, so it is a fair first test of whether it fits your app.

    In this project, use Workspace Authentication Policy for forcing SSO-only org sign-in. Build the smallest version that a real user could complete end to end, keep the change scoped to that path, and tell me how to test it myself.

    Expected outcome

    One complete path a user can walk, the files and settings that changed, and the steps to test it. Walk it yourself before you ship it.

  3. Review it before you publish

    Workspace Authentication Policy is wired in and you are about to put it in front of people. This is the pass that catches the half-configured version.

    Review how this project uses Workspace Authentication Policy before I publish. Check method-level allow/deny and SAML enforcement, list anything that is missing, misconfigured, or only half wired, fix what is safe to fix, and tell me what you left alone and why.

    Expected outcome

    A findings list split into what was fixed and what was left, with a reason for each. Anything left alone is yours to decide on.

Capabilities

  • Method-level allow/deny
  • SAML enforcement

Use cases

  • Forcing SSO-only org sign-in
Start building on LovableRather have it built for you? See the studio

The link to lovable.dev uses a referral code. The atlas is otherwise unsponsored.

Frequently asked

  • What is Workspace Authentication Policy?

    Workspace Authentication Policy is Lovable's Security feature: Configure which sign-in methods (email, Google, Apple, SAML) are allowed. Workspace Authentication Policy controls which sign-in methods (email, phone, Google, Apple, SAML) are permitted across the workspace.

  • Is Workspace Authentication Policy GA or in beta?

    Workspace Authentication Policy is generally available (GA) on Lovable.

  • What Lovable plan includes Workspace Authentication Policy?

    Workspace Authentication Policy is available on Lovable's Business and Enterprise plans plan.

  • When did Workspace Authentication Policy launch?

    Workspace Authentication Policy launched on Apr 24, 2026.

Related in Security

See all →
Back to the atlas
Business and Enterprise plansView on docs.lovable.dev
Post on XLinkedIn

What Lovable Shipped

One email a week. Every new feature. Nothing else.

A curated Monday roundup of every Lovable feature added or promoted to GA in the past week — pulled straight from the atlas.

No spam. Unsubscribe anytime. Independent, not affiliated with Lovable AB.