Configuring authentication

By default, IBM Blueworks Live authenticates users by using their IBM® Registration ID (IBMid). Alternatively, the account admin can configure Blueworks Live to authenticate users based on a Blueworks Live user ID and password (Blueworks Live authentication) or single sign-on (SSO).

As the account admin, you can decide whether users can choose their own authentication method based on what is enabled for the account. This option is only visible when multiple authentication tabs are visible and multiple authentication methods are enabled. If you let individual users choose their own form of authentication, they can make this choice when they log in for the first time and can also change it on the Security tab of their profile settings. The option does not show up for users unless you enable it.

You can override this setting for individual users on the User management tab and restrict a specific user to a specific authentication method, even if the user has not yet accepted an invitation.

Authentication methods

IBM Blueworks Live supports multiple authentication methods to help organizations manage secure access based on their needs. The following table helps you understand the available options and choose the most appropriate method for your environment.

Table 1. Available authentication methods

Method	Description	Recommendation to use
IBMid authentication	Users log in with their IBMid credentials, commonly used across IBM Cloud® services.	IBMid (default).
Blueworks Live authentication	Users are authenticated by using credentials that are managed within Blueworks Live.	Teams needing internal user management without IBMid.
Single sign-on (SSO)	Users can log in by using corporate credentials.	You can use SSO through IBMid Federation to log in to Blueworks Live.