Custom authentication

The Studio can be configured to use your own login solution rather than the standard ones by supplying the auth provider details in your studio configuration.

Custom authentication can be configured for the studio or individual workspaces. This is done by configuring the config key auth for the studio or workspace with a configuration object that adheres to the AuthConfig signature.

import {defineConfig} from 'sanity'

export default defineConfig({
  // ... The rest of the studio config.
  auth: {
    providers: [
      {
        name: 'sanity',
        title: 'Email / Password',
        url: 'https://api.sanity.io/v1/auth/login/sanity',
      },
    ],
  },
})

import {defineConfig} from 'sanity'

export default defineConfig({
  // ... The rest of the studio config.
  auth: {
    providers: (prev) => [...prev,
      {
        name: 'newProvider',
        title: 'Email / Password',
        url: 'https://url.to.other.login',
      }
    ]
  },
})

When you configure SSO with SAML, you're receive a code snippet to help you configure the custom authentication section if your Sanity config.

If you use a self-hosted Studio and use SSO, you may run into issues accessing Media Library.

To work around this, use one of the following options:

• If your provider supports it, you can use a token-based login method by setting auth.loginMethod: 'token'.
• Log in to the dashboard prior to accessing Media Library.

We're working to support other methods in the future.