promptfoo--promptfoo/site/docs/enterprise/authentication.md

sidebar_label, sidebar_position, title, description, keywords

sidebar_label	sidebar_position	title	description	keywords
Authentication	10	Authenticating into Promptfoo Enterprise	Configure enterprise authentication with SSO providers, API keys, service accounts, and CLI access for secure team collaboration	authentication login logout promptfoo enterprise promptfoo app sso saml oidc

Authentication

Setting Up SSO

Promptfoo Enterprise supports both basic authentication and SSO through SAML 2.0 and OIDC. To configure SSO with Promptfoo Enterprise, reach out to the support team with your IdP information and the Promptfoo team will configure it. The authentication endpoint is auth.promptfoo.app.

Basic Authentication

Promptfoo Enterprise supports basic authentication into the application through auth.promptfoo.app. When an organization is created, the global admin will receive an email from Promptfoo Enterprise to log in. Users, teams, and roles will be created in the Organization Settings of the Promptfoo Enterprise application, which is detailed further in the Teams documentation.

You can also authenticate into the application using a magic link. To do this, navigate to auth.promptfoo.app and click the "Login with a magic link" button. You will receive an email with a link to log in. If you do not receive an email, please be sure to check your spam folder.

Authenticating Into the CLI

You may wish to authenticate into the CLI when using Promptfoo Enterprise. Follow these steps to connect Promptfoo Enterprise to the CLI.

1. Install the Promptfoo CLI. Read getting started for help installing the CLI.

2. In the Promptfoo Enterprise app, select the "CLI Login Information" underneath your profile.

3. Copy the first command and run in your CLI. Your CLI will then be authenticated to Promptfoo Enterprise, allowing you to share eval results run locally.

4. Once authenticated, you can run promptfoo eval --share or promptfoo share to share eval results to your Promptfoo Enterprise organization.

:::tip All of your evals are stored locally until you share them. If you were previously an open-source user, you can share your local evals to your Promptfoo Enterprise organization by running promptfoo share. :::

Authenticating with your organization's account enables team-based sharing, ensuring your evaluation results are only visible to members of your organization rather than being publicly accessible.

Working with Multiple Teams

If your organization has multiple teams, you can manage which team context you're operating in:

Viewing Your Teams

# List all teams you have access to
promptfoo auth teams list

This shows all available teams with a marker (●) next to your current team.

Switching Teams

# Switch to a different team
promptfoo auth teams set "Data Science"

You can use the team name, slug, or ID. Your selection persists across CLI sessions.

Checking Current Team

# View your active team
promptfoo auth teams current

All operations (evaluations, red team scans, etc.) will use this team context until you switch to a different team.