Private status pages

Protect your status pages with Password protection, Google SSO, email access codes, or single sign-on through your company's identity provider, over SAML or OpenID Connect.

Go to Status Pages → Choose a status page → Settings → Page Access to configure access controls.

Pro includes 3 public or private status pages, password protection, email access codes, and multilingual pages. Google SSO and SSO connections for status page visitors require Business; SSO connections are billed separately.

Password protection

Require a shared password to access your status page. Simple and effective for basic access control.

Toggle "Password protection" and set your password. You can edit the password at any time.

Google SSO

Allow users to sign in with their Google account. Perfect for teams already using Google Workspace.

Allowed domains

You will need to add allowed email domains in order to let anyone with "@yourcompany.com" domains log in to the status page.

1. Open the allowed domains settings

   Go to Status Pages → Choose a status page → Settings → "Allowed emails domains" section.

2. Add a domain

   An email will be sent to this email address to confirm it.

Email access codes

Restrict access to specific email addresses or entire domains. Visitors enter their email, receive a 6-digit code, and are granted access once verified. Codes expire after 10 minutes.

This is ideal when you want to restrict access to specific people or teams without requiring SSO infrastructure.

Setting up access rules

1. Turn on the email whitelist

   Go to Status Pages → Choose a status page → Settings → Users, then toggle "Email whitelist" on.

2. Add your access rules

   Manage your access rules in the Access rules tab. You can add two types of rules:

   • Allowed domains: anyone with an email at that domain (e.g. *@acme.com) can request access.
   • Individual emails: whitelist specific email addresses. Use "Bulk add" to paste multiple emails at once.

How visitors sign in

When a whitelisted user visits the protected status page, they enter their email address. If it matches a rule, a 6-digit access code is sent to their inbox. They enter the code and are granted a session.

For pages protected by email codes or SSO, the page's Users tab lists active sessions by email under Sessions, with a search box. Revoking a reader's sessions there takes effect immediately. To make readers sign in again after a fixed time, set a maximum session length.

SAML SSO

Sign in with enterprise identity providers like Microsoft Entra ID, Okta, Google Workspace, Auth0, and any other SAML or OpenID Connect provider. The SSO option covers both protocols, through reusable SSO connections that can protect multiple status pages. Its title follows the connection you pick (SAML SSO or OpenID Connect SSO), and so does the button visitors click: Sign in with SAML SSO or Sign in with SSO. The full walkthrough, from creating a connection to attaching it to a page, is in Status page SSO.

SSO Connections

Create and manage SSO connections from Status Pages → SSO Connections. Each connection can be used on multiple status pages.

Click New connection, pick your identity provider, name the connection, and click Create connection. The connection card then guides you through the configuration for your provider.

Pricing

Next steps