> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication & Access

<Card title="Can I enforce 2FA for all users?" href="/support/platform/articles/can-i-enforce-2fa-for-all-users" arrow="true" horizontal>
  Per-user 2FA is available in the Cloud Console User Settings page, where each user can enable TOTP-based two-factor auth ...
</Card>

<Card title="Can I enforce SSO and disable password-based auth?" href="/support/platform/articles/can-i-enforce-sso-and-disable-password-based-auth" arrow="true" horizontal>
  CoreWeave supports SAML SSO for organization sign-in, configurable in the Cloud Console on the SAML SSO configuration pa ...
</Card>

<Card title="How do I grant limited access roles like read-only or billing viewer?" href="/support/platform/articles/how-do-i-grant-limited-access-roles-like-read-only-or-billing-viewer" arrow="true" horizontal>
  Attach an access policy that includes only the role the user needs. For example, Observability Viewer for Grafana dashbo ...
</Card>

<Card title="How do I scope users to specific clusters?" href="/support/platform/articles/how-do-i-scope-users-to-specific-clusters" arrow="true" horizontal>
  With CoreWeave's default Managed Authentication all users in an org can authenticate against any cluster in that org. Wh ...
</Card>

<Card title="How do I set up IAM access policies and roles?" href="/support/platform/articles/how-do-i-set-up-iam-access-policies-and-roles" arrow="true" horizontal>
  Create access policies on the Access Policies page in the Cloud Console. Each policy contains one or more rules. Each ru ...
</Card>

<Card title="How does SCIM and automated user provisioning work?" href="/support/platform/articles/how-does-scim-and-automated-user-provisioning-work" arrow="true" horizontal>
  CoreWeave's automated user provisioning (AUP) integrates with SCIM-compliant identity providers and requires SAML SSO to ...
</Card>

<Card title="What is the difference between legacy groups and IAM policies?" href="/support/platform/articles/what-is-the-difference-between-legacy-groups-and-iam-policies" arrow="true" horizontal>
  Legacy groups (admin, write, read, metrics, billing\_viewer) are CoreWeave's older group-based permission model. Group me ...
</Card>