Skip to content
English
  • There are no suggestions because the search field is empty.

Can I enforce both Google SSO and 2FA at the same time on Tilt?

Enforcing Google SSO? Skip Tilt's 2FA — Google already handles two-factor at the identity provider level.

Quick answer

No. Do not enforce both Google SSO and 2FA in Tilt. Google handles two-factor authentication at its own SSO layer, so Tilt's 2FA becomes redundant and can cause login conflicts.

Who this applies to / Prerequisites

  • You are an HR admin evaluating Tilt's login enforcement options.
  • You are considering both Google SSO and 2FA enforcement.

Steps

  1. If you enforce Google SSO in Tilt, your users authenticate through Google — not through Tilt directly.
  2. Google Workspace handles two-factor authentication at the identity-provider level (in your Google admin console).
  3. Enforce 2FA in Google Workspace, NOT in Tilt.
  4. In Tilt, keep Two Factor Authentication toggled OFF when Google SSO is enforced.

What if it doesn't work

  • If you already have both enabled and users are seeing conflicts, disable Two Factor Authentication in Tilt (Org Settings → Security). Users will continue to be protected by Google's 2FA.

Limits and exceptions

  • This applies specifically to Google SSO. If you're using SAML SSO, your identity provider likely handles 2FA at its own layer too — confirm with your IT team.
  • If Google SSO is optional (not enforced), Tilt's 2FA can still apply to users who log in with email and password instead of Google.

Related questions

  • How do I enforce Google SSO for my company's Tilt account?
  • How do I enforce 2FA for my company's Tilt account?