Can I enforce both Google SSO and 2FA at the same time on Tilt?
Enforcing Google SSO? Skip Tilt's 2FA — Google already handles two-factor at the identity provider level.
Quick answer
No. Do not enforce both Google SSO and 2FA in Tilt. Google handles two-factor authentication at its own SSO layer, so Tilt's 2FA becomes redundant and can cause login conflicts.
Who this applies to / Prerequisites
- You are an HR admin evaluating Tilt's login enforcement options.
- You are considering both Google SSO and 2FA enforcement.
Steps
- If you enforce Google SSO in Tilt, your users authenticate through Google — not through Tilt directly.
- Google Workspace handles two-factor authentication at the identity-provider level (in your Google admin console).
- Enforce 2FA in Google Workspace, NOT in Tilt.
- In Tilt, keep Two Factor Authentication toggled OFF when Google SSO is enforced.
What if it doesn't work
- If you already have both enabled and users are seeing conflicts, disable Two Factor Authentication in Tilt (Org Settings → Security). Users will continue to be protected by Google's 2FA.
Limits and exceptions
- This applies specifically to Google SSO. If you're using SAML SSO, your identity provider likely handles 2FA at its own layer too — confirm with your IT team.
- If Google SSO is optional (not enforced), Tilt's 2FA can still apply to users who log in with email and password instead of Google.
Related questions
- How do I enforce Google SSO for my company's Tilt account?
- How do I enforce 2FA for my company's Tilt account?