Skip to main content

​
Overview

ZeroPath supports multiple authentication methods through a unified login experience. All authentication is handled securely, with session management designed for both interactive dashboard use and API access.

​
Supported Providers

ZeroPath supports the following login methods:
ProviderTypeAvailability
Email / PasswordStandardAll plans
GoogleSocial SSOAll plans
GitHubSocial SSOAll plans
Microsoft / Azure ADSocial SSOAll plans
SAMLEnterprise SSOEnterprise plans
OIDCEnterprise SSOEnterprise plans
Enterprise SSO (SAML/OIDC) is configured through your ZeroPath account team. Contact support@zeropath.com to set up SSO for your identity provider (Okta, Auth0, Azure AD, Google Workspace, etc.).

​
Login Flow

  1. Visit zeropath.com/login.
  2. Click “Log In” (or “Sign Up” for new accounts).
  3. Choose your authentication method (email/password, Google, GitHub, Microsoft, or your organization’s SSO).
  4. After successful authentication, you’re redirected to the ZeroPath dashboard.

​
Session Management

  • Sessions are created upon successful login and stored as secure, HTTP-only cookies.
  • Session tokens are cryptographically hashed before storage — the raw token exists only in your browser cookie.
  • Sessions persist for up to 1 year unless explicitly logged out.
  • Each session is tied to a single user and organization.

​
Switching Organizations

If you belong to multiple organizations, the active organization is stored in a separate cookie. You can switch organizations from the dashboard without re-authenticating.

​
Security Notes

  • All authentication traffic uses HTTPS encryption.
  • Session secrets are cryptographically hashed before database storage.
  • Cookies are configured with Secure, HttpOnly (for session), and SameSite=Lax attributes.
  • Logout invalidates both the local session and the upstream identity provider session.