🔐Auth and access

Canonical companion to Private apps: additional auth types, password reset, and how Integrations connect to Users. Keep this as the “how login works” page; Private apps stays the switch.

What this is / when to use it

Use this page when you are adding a second login button, resetting passwords, or deciding OTP vs password.

Before you start

Private app + Users database. Provider credentials ready for Google / Auth0 / Okta.

Build it

1. Set primary auth on Private apps.

2. Open Integrations and add the provider with labeled fields (not JSON). See Integrations.

3. Return to Users and enable that provider as an additional auth type.

4. Publish. Test each button in a private window.

Password reset

Who	How
End user (password)	Login → Forgot password → email link.
End user (OTP)	Request a new code. There is no password to reset.
Maker	NotionApps builder login → Forgot password. This does not change app users.

Every control

Covered on Private apps + Integrations. Additional types: OTP_EMAIL, EMAIL_PASS, google, auth0, okta. Phone OTP_NUM is legacy-only for new setups.

What users see

One primary field (email or email+password) plus extra buttons. Reset is only on password apps.

Limits and plans

Auth0 / Okta / Enterprise SSO are higher-plan. Enterprise SSO.

Example

Primary Email OTP, additional Google for staff who already use Google Workspace. Clients never see Google because you only enabled it — actually extra buttons show to everyone on the login screen. If clients must not use Google, do not enable it, or use a separate staff app.

Fix problems

See Private apps and the Google-vs-password troubleshooting page.

Related

Private apps. Integrations. Sign up.