# Security controls for team admins

> The controls MockFlow gives team admins: single sign-on, two-factor authentication, SCIM, board roles, private boards, license management, Space activity and safe deletion.

Source: https://mockflow.com/docs/security-controls-for-team-admins

MockFlow gives the people who manage a team the controls to keep its boards secure: how people sign in, who joins the license, what each person can do on a board and a record of what changed. This article brings them together, with links to the step-by-step guides.

![Controls for team admins: Security & SSO with Enable single sign-on and Two-factor authentication switched on; roles on every board (Reviewer, Editor, Admin); private by default; licenses you control; Space activity; and safe deletion](https://assets.mockflow.com/docs/media/8a9e52909f5346778745faa99e11e997.webp)

## Control how your team signs in

The license owner manages sign in from **My Account** > **Security & SSO**:

- **Single sign-on (SSO):** connect Okta, Microsoft Entra ID (Azure AD), Auth0, OneLogin or any SAML 2.0 identity provider, and require SSO so nobody on your license can sign in another way. See [Set up single sign-on (SAML)](/docs/set-up-single-sign-on-saml).
- **Two-factor authentication (2FA):** everyone on your license enters a login code sent to their email after their password. See [Turn on two-factor authentication for your team](/docs/turn-on-two-factor-authentication-for-your-team).
- **SCIM provisioning:** licenses follow your identity provider, so people get a license when you assign them and lose it when you unassign them. See [Provision users with SCIM](/docs/provision-users-with-scim).

## Control who can see each board

- **Private by default:** boards in **Private boards** are visible only to their owner and have no **Share** button. See [Share a private board](/docs/share-a-private-board).
- **Roles:** people you invite are a **Reviewer** (view, give feedback and export), an **Editor** (also edit in real time) or an **Admin** (full rights, including sharing). See [Share a board with people](/docs/share-a-board-with-people).
- **Protected public links:** a public link is view only, and **Protect with key** asks viewers for a key. See [Share a board with a public link](/docs/share-a-board-with-a-public-link).

## Manage your license

Add and remove people, make someone a License Admin, and move a departing member's boards to a teammate so no work is lost. See [How team licenses work](/docs/how-team-licenses-work) and [Move a departing member's data to a teammate](/docs/move-a-departing-members-data-to-a-teammate).

## Review activity and protect against deletion

- **Space activity** shows who created, shared, moved, restored or deleted boards in a space, and when. See [Track activity in a space](/docs/track-activity-in-a-space).
- **Safe deletion:** deleting asks you to type **delete** to confirm, and on Plus and Max deleted boards and spaces wait in Trash Bin for 30 days. See [Delete and restore boards and spaces](/docs/delete-and-restore).

## Which plans include these controls

Single sign-on, two-factor authentication for the team and SCIM are part of the Max plan with yearly billing and five or more licenses, and only the license owner sees **Security & SSO**. Space activity and Trash Bin are available on Plus and Max. Editor roles are also part of Plus and Max. See [MockFlow pricing](https://mockflow.com/pricing/) for details.

## Next steps

- [Security at MockFlow](/docs/security-at-mockflow)
- [Security reviews and contacting MockFlow](/docs/security-reviews-and-contact)