Settings

Workspace

Workspace name

Workspace URL

app.example.com/

Verified domain

Verified Feb 14, 2024

Default time zone

Default language

Description

Defaults for new users

Default role

Invitation expiry

Auto-join by domainAnyone with a @northwind.co address Require approvalAn admin confirms every join

Data retention

Audit log

Deleted accounts

Restorable during this window, then permanently erased.

Appearance

Applies to your account only and persists in this browser

Theme

System follows your operating-system setting.

Accent colour

Retints the primary colour, charts, and focus rings.

Density

How much breathing room cards and rows get.

How theming works

Every colour is an OKLCh custom property declared in src/styles/main.css, under :root for light and .dark for dark.

The accent presets above rewrite --primary, --chart-1, and --ring at runtime, picking a lightness that suits the current mode.

Choices persist to localStorage and reapply before first paint, so there is no flash of the wrong theme.

Read the theming docs

Authentication

Require MFA for adminsEnforced since Mar 2026. Admins without MFA lose access at next sign-in. Require MFA for everyoneRolling out — 78% enrolled. 1,967 accounts still need to enrol. Enforce SSO for the verified domainSAML via Okta. Password sign-in is refused for @northwind.co. Allow passkeys1,240 accounts have enrolled one voluntarily. IP allowlist for admin actionsNot configured. Privileged actions are allowed from any address.

Sessions & passwords

Idle timeout

Idle timeout — privileged roles

Minimum password length

Password rotation

Block breached passwordsChecked against Have I Been Pwned at set time

Posture

MFA coverage78%
Policy-compliant passwords91%
Admins with MFA100%
Overdue recertifications6

Open Security Center

Rotate all API keys

Invalidates every key immediately. Integrations break until they are updated with the new secrets.

Revoke every session

Signs out all 3,184 active sessions, including your own. Everyone re-authenticates on next request.

Delete this workspace

Permanently removes 8,942 accounts, all audit history, and every integration. This cannot be undone and requires a second owner to confirm.