Profile Settings
Profile Settings allows you seamlessly add or modify any account details that you like.
It also provides you with essential information regarding your overall account.
Profile Settings can be accessed by clicking on the Workspace Settings option on the top right corner where your display image or name initials are seen, right next to the Dark Mode button.
On opening Profile Settings you will see the following:
Change Password
This gives you the option to change your current password. The password must be:
- Minimum 8 characters
- At least 1 symbol
- 1 uppercase letter
- 1 lowercase letter
- 1 number
In case you are unable to remember the current password or are not able to reset the password for any reason, feel free to reach out to support@fyno.io.
Password Expiry
- Your password expires every 6 months.
- We start showing a tooltip to change your password 14 days before its expiry.
- If you didn’t change the password and when the password is expired, then you will be forced to setup a new password.
Edit Profile
The Edit Profile option allows you to enter multiple details regarding yourself and your company.
These are:
- Name
- Phone
Activity
User Activity captures the login activity of your account, for your reference.
You can see:
- Browser details
- IP address of the login attempt
- Activity, showing the success or failure of the login attempt.
- The timestamp, including the date and time, of the login attempt.
Preferences
Preferences allows you to add and update the timezone of your account. Select the timezone applicable or closest to your region.
Cookies
There are 2 cookies, Strictly Essential and Product Analytics Cookies.
Strictly Essential Cookies (Mandatory)
These cookies are necessary for the website to function correctly. They are set based on your actions, such as adjusting privacy settings, logging in, filling out forms, or sending inquiries through customer support. These cookies cannot be disabled and do not gather any personally identifiable information except for data related to interactions with customer support.
Product Analytics Cookies (Optional)
These cookies help us understand how visitors interact with our website by collecting aggregated and anonymous information. They enable us to count visits, identify traffic sources, and monitor the website’s performance. Without these cookies, we cannot improve your browsing experience or know when you’ve visited our website.
Security (Two-Factor Authentication)
Two-Factor Authentication (2FA) adds an extra layer of security to your Fyno account. Users can enable or disable 2FA from the Security section under Profile Settings.
2FA works alongside SAML-based login, giving you better control over how users access the Fyno dashboard. Even if a password is compromised, the extra authentication step helps prevent unauthorized access. Enabling 2FA also helps meet compliance requirements for standards such as GDPR and ISO.
Enable Two-Factor Authentication (2FA)
Two-Factor Authentication is recommended for accounts not using SAML or for administrative access.
Steps to Enable 2FA
Use 2FA with SAML Authentication
When 2FA is enabled:
- Log in using your company credentials via SAML.
- After successful SAML authentication, Fyno will request a verification token.
- Enter the token from your authenticator app to access the dashboard.
When 2FA is disabled:
- Authenticate using company SAML login.
- You will be logged in directly without additional verification.
Layered Security Approach
Fyno allows flexible access control using both SAML SSO and 2FA:
- SAML provides centralized identity management.
- 2FA adds an extra security layer at the Fyno level.
- Together, they provide a layered, high-security access model.
SAML Single Sign-On (SSO)
SAML Single Sign-On (SSO) makes it easy for your team to access Fyno using your centralized identity provider (IdP). Everyone can log in seamlessly through the company’s primary authentication system, such as Okta, AWS, or Google Workspace, without needing separate passwords.
After SAML is enabled, users can:
- Open your company’s IdP (for example, Okta or AWS).
- Click on the Fyno application.
- Get logged in automatically.
You control access from one place:
- If you give someone access, they can use Fyno.
- Just-in-Time (JIT) access lets your team sign in to Fyno using your company’s identity provider. Users get instant access when they log in, and access is removed immediately when they’re removed from your IdP or when they leave the organisation.
How This Helps Organizations
By using SAML SSO:
- No separate username/password management.
- Centralized access control via AWS.
- Automated onboarding and offboarding.
- Immediate access revocation when removed in AWS.
- Reduced security risk and easier auditing.
How to Set Up SAML in Fyno
Prerequisites:
Before starting, make sure you have:
- Admin access to your Identity Provider (IdP).
- Ability to download or copy your SAML Signing Certificate from your IdP.
Get the Signing Certificate from Your Identity Provider
- Go to your Identity Provider’s SAML application or SSO configuration section.
- Locate the Signing Certificate (it may also be called):
- X.509 Certificate
- Public Certificate
- SAML Certificate
- Metadata
- Export or download the certificate in .xml format.
Receive Configuration Details from Fyno
Fyno will send you the following values:
- ACS URL (Assertion Consumer Service URL) / Recipient URL / Destination URL
- Audience / Entity ID
- Custom ID (generated by the Fyno team)
These values are unique to your organization and environment.
How This Helps Organizations
By using SAML SSO:
- No separate username/password management.
- Centralized access control via AWS.
- Automated onboarding/offboarding.
- Immediate access revocation when removed in AWS.
- Reduced security risk and easier auditing.
Note: For more details or support, reach out to us at support@fyno.io.
Example: How to configure:
- Okta SAML Single Sign-On to Access Fyno
- Arcon SAML Single Sign-On to Access Fyno
- AWS SAML Single Sign-On to Access Fyno
Authentication
Fyno supports multiple authentication mechanisms to securely manage access across organizations.
Supported Authentication Options
Social Login (Google, Microsoft)
Social Login enables authentication using third-party identity providers such as Google and Microsoft.
This method simplifies credential management and accelerates user onboarding by eliminating the need to create and remember separate passwords.