# TiDB Cloud Administrator's Access Control
+ TiDB Cloud Console access:
  + Default credentials: email/password, Google, GitHub and Microsoft
  + Organization Single Sign-On: Google, GitHub, Microsoft, OIDC and SAML
+ Multi Factor Authentication can be enabled
+ API key can be enabled for programmatic access

------------------------------------------------------------------------------
The default authentication methods includes: email and password pairs, Google, GitHub and Microsoft accounts.

Besides the default public authentication methods, you can configure Cloud Organization SSO (Single Sign-On) for your organization, which supports organization-specific authentication methods including Google, GitHub, and Microsoft SSO social accounts, as well as any other authentication providers compatible with OIDC or SAML. If you enable Cloud Organization SSO, you will be prompted to provide a custom login URL, and once Cloud Organization SSO is enabled, the URL cannot be changed. Members in your organization will only be able to log in using the active methods available at the custom login URL. Please note that this action cannot be reversed.

TiDB Cloud supports administrators to enable MFA, which can provide users with more secure authentication.