Authentication controls how dashboard users sign in to Leena AI — the admins, agents, and builders who log in to configure and operate the platform. It also lets you limit sign-in to a defined set of networks.

This is separate from how employees authenticate into the assistant itself. Those settings live under Leena Channels (Apps authentication, Web authentication, Other auth settings, and SAML apps).

Where to find it

Open the Admin Console, then go to Dashboard settings → Authentication.

The page has two parts: choosing the sign-in method, and restricting which networks can reach the dashboard.

1. Select the type of authentication

Pick one of two methods. The choice applies to every dashboard user in the workspace.

Email + Password

Users sign in with their email address and a password. Selecting this reveals Configure Password Policy, where you set the rules new passwords must satisfy.

Character requirements — tick any combination:

• At least one uppercase letter
• At least one lowercase letter
• At least one number
• At least one symbol or non-numeric character, from ! @ # $ % ^ & ( ) * + = _ -

Maintain History — prevents people from cycling back to a recent password. Tick it, then set how many previous passwords to remember. Accepts a whole number from 1 to 9.

Set password expiry — forces a password change on a schedule. Tick it, then set the number of days a password stays valid. Accepts a whole number from 1 to 365.

Both numeric fields stay disabled until you tick the box above them, and both reject decimals and out-of-range values when you save.

Use Save to apply the policy, or Cancel to drop your edits and restore the last saved rules. Both stay inactive until you change something.

SSO

Users sign in through your identity provider using SAML. Selecting this reveals Single Sign On Set-up.

The fastest route is to upload the metadata file from your identity provider — an XML file up to 2 MB — which fills in the fields below for you. You can also enter them by hand:

Values to give your identity provider

The SAML Configuration block lower down holds the values your identity provider needs from Leena AI. These are generated for you and are read-only:

• Audience URL
• ACS URL
• Certificate

Use Download meta data file to hand these over as a single file rather than copying each value across.

Save your changes once the provider details are complete. Test the sign-in flow with a single account before rolling the change out, since it applies to everyone immediately.

2. Restrict IP Addresses

Limit dashboard sign-in to specific networks. Turn the toggle on, then add the ranges that should be permitted.

Each entry takes:

• Name of the IP address — a label so the entry is recognisable later, such as the office or VPN it belongs to
• The IP address and its CIDR value — the range, entered as the address followed by the network prefix

The page shows a running count of how many entries are in the list.