> For the complete documentation index, see [llms.txt](https://docs.notionapps.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.notionapps.com/users/auth-and-access.md).

# Auth and access

Canonical companion to [Private apps](https://docs.notionapps.com/users/private-apps): additional auth types, password reset, and how Integrations connect to Users. Keep this as the “how login works” page; Private apps stays the switch.

## What this is / when to use it

Use this page when you are adding a second login button, resetting passwords, or deciding OTP vs password.

## Before you start

Private app + Users database. Provider credentials ready for Google / Auth0 / Okta.

## Build it

1. Set primary auth on [Private apps](https://docs.notionapps.com/users/private-apps).
2. Open **Integrations** and add the provider with labeled fields (not JSON). See [Integrations](https://docs.notionapps.com/integrations/integrations).
3. Return to Users and enable that provider as an **additional** auth type.
4. Publish. Test each button in a private window.

### Password reset

| Who                 | How                                                                         |
| ------------------- | --------------------------------------------------------------------------- |
| End user (password) | Login → Forgot password → email link.                                       |
| End user (OTP)      | Request a new code. There is no password to reset.                          |
| Maker               | NotionApps builder login → Forgot password. This does not change app users. |

## Every control

Covered on Private apps + Integrations. Additional types: `OTP_EMAIL`, `EMAIL_PASS`, `google`, `auth0`, `okta`. Phone `OTP_NUM` is legacy-only for new setups.

## What users see

One primary field (email or email+password) plus extra buttons. Reset is only on password apps.

## Limits and plans

Auth0 / Okta / Enterprise SSO are higher-plan. [Enterprise SSO](https://docs.notionapps.com/enterprise-sso).

## Example

Primary Email OTP, additional Google for staff who already use Google Workspace. Clients never see Google because you only enabled it — actually extra buttons show to everyone on the login screen. If clients must not use Google, do not enable it, or use a separate staff app.

## Fix problems

See Private apps and the Google-vs-password troubleshooting page.

## Related

[Private apps](https://docs.notionapps.com/users/private-apps). [Integrations](https://docs.notionapps.com/integrations/integrations). [Sign up](https://docs.notionapps.com/users/sign-up).