Using Sign In With Google
Spell supports single-sign using Sign In With Google. Accounts using the Sign In With Google integration authenticate using their Google account instead of their email and password.
Configuring your account
You may register for Spell using either a email and password or Sign In With Google.
To register an account using Google authentication, click on the button labelled
Sign up with Google on the account registration page.
To switch an existing email and password based account to use Google authentication, go to the Account page in your web console and click on the button labelled
Connect to Google. This will take you through the Sign In With Google flow. Once you do, the page will refresh to reflect the changes that have been made to your account:
After enabling Sign In With Google you can no longer edit your password, as your password is no longer used to login. Editing your username is similarly disabled.
One important limitation is that Google authentication, once enabled, cannot currently be disabled.
Logging into an account using Google authentication
To log into an account secured using Sign In With Google on the web, use the "Sign In With Google" button on the login page:
To log into an account secured using Sign In With Google in the Spell CLI, run
spell login and use the interactive login flow.
The alternative non-interactive
spell login --identity $IDENTITY --password $PASSWORD login flow will not work. If you need non-interactive access to your account, use Spell's access tokens feature instead.
Authentication using the Python SDK is unchanged.