[{"data":1,"prerenderedAt":470},["ShallowReactive",2],{"docs-team-lead\u002Fmanaging-your-team\u002Fsecurity-controls":3},{"article":4,"sectionArticles":283,"categories":447,"relatedArticles":468,"prevArticle":384,"nextArticle":388,"categoryName":462,"error":469},{"id":5,"title":6,"avatar":7,"body":8,"description":275,"docx":7,"extension":276,"meta":277,"navigation":278,"order":7,"path":279,"pdf":7,"pdfLabel":7,"procurementPack":7,"seo":280,"slug":7,"stem":281,"__hash__":282},"content\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fsecurity-controls.md","Security Controls",null,{"type":9,"value":10,"toc":261},"minimark",[11,15,40,45,50,53,74,77,92,95,107,110,116,137,140,144,154,170,174,180,194,201,205,237,241],[12,13,6],"h1",{"id":14},"security-controls",[16,17,18,19,23,24,27,28,31,32,35,36,39],"p",{},"Admins get extra protection because they can remove members, transfer ownership and wipe photo data. The controls live under ",[20,21,22],"strong",{},"Settings > Security"," and are available to admins only. The tab has four cards: ",[20,25,26],{},"Admin management",", ",[20,29,30],{},"Transfer ownership"," (owner only), ",[20,33,34],{},"Single sign-on"," and ",[20,37,38],{},"Multi-factor authentication",".",[41,42,44],"h2",{"id":43},"how-it-works","How it works",[46,47,49],"h3",{"id":48},"multi-factor-authentication-mfa","Multi-factor authentication (MFA)",[16,51,52],{},"MFA adds an email code for admins. When it is on, an admin who signs in after a 24-hour gap gets a 6-digit code by email and must enter it before the admin panel opens.",[54,55,56,62,68],"ol",{},[57,58,59,60,39],"li",{},"Go to ",[20,61,22],{},[57,63,64,65,67],{},"On the ",[20,66,38],{}," card, toggle MFA on.",[57,69,70,71,39],{},"Click ",[20,72,73],{},"Save changes",[16,75,76],{},"The admin who turns MFA on is not asked for a code right away. Their next sign-in after 24 hours triggers it.",[78,79,80,83,86,89],"ul",{},[57,81,82],{},"Codes are 6 digits and expire after 30 minutes.",[57,84,85],{},"After 5 wrong attempts the code is invalid and a new one must be requested.",[57,87,88],{},"A verified session lasts 24 hours.",[57,90,91],{},"Members are not affected. MFA applies to admins only.",[46,93,26],{"id":94},"admin-management",[16,96,97,98,100,101,106],{},"The ",[20,99,26],{}," card lists current admins and pending admin invites. Add, remove and revoke here. See ",[102,103,105],"a",{"href":104},"\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Froles-and-permissions","Roles and Permissions"," for the steps.",[46,108,30],{"id":109},"transfer-ownership",[16,111,112,113,115],{},"The owner holds the highest level of access, including billing and irreversible actions. Only the current owner sees the ",[20,114,30],{}," card.",[54,117,118,123,128,134],{},[57,119,59,120,122],{},[20,121,22],{}," as the owner.",[57,124,64,125,127],{},[20,126,30],{}," card, select the new owner. Only existing admins are listed. Add the person as an admin first if they are not.",[57,129,130,131,133],{},"Read the warning and click ",[20,132,30],{},", then confirm.",[57,135,136],{},"The new owner gets a confirmation email. They must click the link in it within 24 hours. Ownership moves when they confirm.",[16,138,139],{},"If the owner has left the company and cannot sign in, email support from a company address and ask for the transfer. Support needs a written request that names the organization, the old owner and the new owner. The new owner must already have a HeadshotPro account.",[46,141,143],{"id":142},"data-retention","Data retention",[16,145,97,146,149,150,153],{},[20,147,148],{},"Delete all user data after 30 days"," setting under ",[20,151,152],{},"Settings > Headshots"," deletes every member's results 30 days after their last photo is generated, including edits. It is off by default.",[54,155,156,160,165],{},[57,157,59,158,39],{},[20,159,152],{},[57,161,162,163,39],{},"Toggle ",[20,164,148],{},[57,166,70,167,169],{},[20,168,73],{}," and confirm.",[46,171,173],{"id":172},"sso-access-controls","SSO access controls",[16,175,176,177,179],{},"For organizations with SSO, the ",[20,178,34],{}," card adds:",[78,181,182,188],{},[57,183,184,187],{},[20,185,186],{},"Require SSO login"," - blocks email, password and social sign-in for users on your verified domains.",[57,189,190,193],{},[20,191,192],{},"Auto-join (JIT provisioning)"," - lets anyone on a verified domain join without an invite.",[16,195,196,197,39],{},"See ",[102,198,200],{"href":199},"\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fsso-setup","SSO Setup",[41,202,204],{"id":203},"good-to-know","Good to know",[78,206,207,210,213,216,227,230],{},[57,208,209],{},"Only admins see the Security tab. Members cannot view or change these settings.",[57,211,212],{},"MFA is email-only. There is no SMS or authenticator app option.",[57,214,215],{},"The owner cannot be removed from the admin list. Transfer ownership first.",[57,217,218,219,222,223,39],{},"Deleting the organization is a separate action. It is self-serve only when you are the only member, under ",[20,220,221],{},"Settings > General > Danger zone",". Otherwise email support from the owner's address. See ",[102,224,226],{"href":225},"\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Forganization-settings","Organization Settings",[57,228,229],{},"The 30-day deletion applies to the whole organization. It cannot be limited to one team or one member.",[57,231,232,233,236],{},"SSO organizations get ",[20,234,235],{},"Audit logs"," in the left menu: sign-in events with user, time and type, filterable by event and date.",[41,238,240],{"id":239},"related","Related",[78,242,243,247,251,255],{},[57,244,245],{},[102,246,105],{"href":104},[57,248,249],{},[102,250,200],{"href":199},[57,252,253],{},[102,254,226],{"href":225},[57,256,257],{},[102,258,260],{"href":259},"\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fmanaging-members","Managing Members",{"title":262,"searchDepth":263,"depth":263,"links":264},"",2,[265,273,274],{"id":43,"depth":263,"text":44,"children":266},[267,269,270,271,272],{"id":48,"depth":268,"text":49},3,{"id":94,"depth":268,"text":26},{"id":109,"depth":268,"text":30},{"id":142,"depth":268,"text":143},{"id":172,"depth":268,"text":173},{"id":203,"depth":263,"text":204},{"id":239,"depth":263,"text":240},"Configure MFA for admins, manage admins, transfer ownership, and set data retention for your organization.","md",{},true,"\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fsecurity-controls",{"title":6,"description":275},"docs\u002Fteam-lead\u002Fmanaging-your-team\u002Fsecurity-controls","esrQ5ei1V9_PNh5u0xLVSLzLmA_epvNHZ64hN7IcMLc",[284,290,295,300,305,311,316,321,326,331,336,342,347,352,358,363,368,373,376,379,384,387,388,391,397,402,407,412,417,422,427,432,437,442],{"title":285,"description":286,"path":287,"dir":288,"slug":289},"Billing History","Where to find invoices and receipts, add your company details to them, and read the credit activity log.","\u002Fdocs\u002Fteam-lead\u002Fbilling\u002Fbilling-history","\u002Fdocs\u002Fteam-lead\u002Fbilling","billing-history",{"title":291,"description":292,"path":293,"dir":288,"slug":294},"Credits Overview","How team credits work: when a credit is used, what happens when someone leaves, edit credits, and how to track usage.","\u002Fdocs\u002Fteam-lead\u002Fbilling\u002Fcredits-overview","credits-overview",{"title":296,"description":297,"path":298,"dir":288,"slug":299},"Purchasing Credits","How to buy credits for your team: payment methods, the volume discount ladder, invoices for large orders, and automatic top-up.","\u002Fdocs\u002Fteam-lead\u002Fbilling\u002Fpurchasing-credits","purchasing-credits",{"title":301,"description":302,"path":303,"dir":288,"slug":304},"Refunds for Teams","The 30-day money-back guarantee for team purchases and how to request a refund.","\u002Fdocs\u002Fteam-lead\u002Fbilling\u002Frefunds","refunds",{"title":306,"description":307,"path":308,"dir":309,"slug":310},"Creating a Team Account","How to set up a HeadshotPro team: answer four questions, pick the look, pay, and invite your team.","\u002Fdocs\u002Fteam-lead\u002Fgetting-started\u002Fcreating-a-team","\u002Fdocs\u002Fteam-lead\u002Fgetting-started","creating-a-team",{"title":312,"description":313,"path":314,"dir":309,"slug":315},"Inviting Members","Three ways to add people to your team: email invites, your shareable team link, or uploading photos for them.","\u002Fdocs\u002Fteam-lead\u002Fgetting-started\u002Finviting-members","inviting-members",{"title":317,"description":318,"path":319,"dir":309,"slug":320},"The New AI Model for Teams","What changed with the latest AI model: 2–3 selfies instead of 15, 40 headshots per person, self-serve redos, and how to upgrade an older team.","\u002Fdocs\u002Fteam-lead\u002Fgetting-started\u002Fnew-model","new-model",{"title":322,"description":323,"path":324,"dir":309,"slug":325},"HeadshotPro for Teams: Overview","How HeadshotPro Teams works for organizations: one consistent look, self-serve shoots for every member, and answers to the questions buyers ask first.","\u002Fdocs\u002Fteam-lead\u002Fgetting-started\u002Foverview","overview",{"title":327,"description":328,"path":329,"dir":309,"slug":330},"Overview","Your team dashboard: credits, member progress, pending invites, the team link, and the left menu.","\u002Fdocs\u002Fteam-lead\u002Fgetting-started\u002Fteam-dashboard","team-dashboard",{"title":332,"description":333,"path":334,"dir":309,"slug":335},"Team Link, QR Code and Poster","Your team's permanent join link at headshotpro.com\u002Ft\u002Fyour-company, its QR code, and the printable poster.","\u002Fdocs\u002Fteam-lead\u002Fgetting-started\u002Fteam-link-qr-and-poster","team-link-qr-and-poster",{"title":337,"description":338,"path":339,"dir":340,"slug":341},"API Overview","The HeadshotPro API: what it automates, the three ways to connect your HR tools, and where the full documentation lives.","\u002Fdocs\u002Fteam-lead\u002Fintegrations\u002Fapi-overview","\u002Fdocs\u002Fteam-lead\u002Fintegrations","api-overview",{"title":343,"description":344,"path":345,"dir":340,"slug":346},"Gift Codes","Hand out headshots with redeemable codes instead of a team invite.","\u002Fdocs\u002Fteam-lead\u002Fintegrations\u002Fgift-codes","gift-codes",{"title":348,"description":349,"path":350,"dir":340,"slug":351},"Webhooks and Integrations","Connect HeadshotPro to Zapier or to your own systems with webhooks.","\u002Fdocs\u002Fteam-lead\u002Fintegrations\u002Fwebhooks-and-integrations","webhooks-and-integrations",{"title":353,"description":354,"path":355,"dir":356,"slug":357},"Creating and Managing Teams","How to create, edit, and delete sub-teams within your organization to group members by department","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fcreating-teams","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team","creating-teams",{"title":359,"description":360,"path":361,"dir":356,"slug":362},"Custom Fields","Collect extra information from your team members during their headshot onboarding.","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fcustom-fields","custom-fields",{"title":364,"description":365,"path":366,"dir":356,"slug":367},"Customizing Emails","Control which emails your team receives, where admin alerts go, and rewrite the wording of member emails.","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fcustomizing-emails","customizing-emails",{"title":369,"description":370,"path":371,"dir":356,"slug":372},"Deleting Your Organization","How the owner deletes a team organization, and how a team lead then deletes their own HeadshotPro account.","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fdeleting-your-organization","deleting-your-organization",{"title":260,"description":374,"path":259,"dir":356,"slug":375},"Find any member, see where they are in their shoot, and take action from the Members page.","managing-members",{"title":226,"description":377,"path":225,"dir":356,"slug":378},"Manage your organization's name, logo, headshot preferences and email notifications.","organization-settings",{"title":380,"description":381,"path":382,"dir":356,"slug":383},"Removing Members","Remove a member from your organization, and understand what happens to their data and your credits.","\u002Fdocs\u002Fteam-lead\u002Fmanaging-your-team\u002Fremoving-members","removing-members",{"title":105,"description":385,"path":104,"dir":356,"slug":386},"Understand the owner, admin and member roles, and how to add or remove admins.","roles-and-permissions",{"title":6,"description":275,"path":279,"dir":356,"slug":14},{"title":200,"description":389,"path":199,"dir":356,"slug":390},"Connect your identity provider to HeadshotPro so team members authenticate through your company's existing SSO system.","sso-setup",{"title":392,"description":393,"path":394,"dir":395,"slug":396},"Approving and Managing Headshots","How to review finished member headshots, mark them as handled, and download photos for the whole team","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fapproving-and-managing-headshots","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots","approving-and-managing-headshots",{"title":398,"description":399,"path":400,"dir":395,"slug":401},"Bulk Uploading Photos","Upload ZIP files for multiple team members at once to create headshot models without individual onboarding.","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fbulk-uploading-photos","bulk-uploading-photos",{"title":403,"description":404,"path":405,"dir":395,"slug":406},"Creating Profile Picture Templates","How to create branded profile picture templates with shape, background, border, outline, and logo overlay settings.","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fcreating-templates","creating-templates",{"title":408,"description":409,"path":410,"dir":395,"slug":411},"Enforcing Consistency","Use the approved list, outfit rules, backdrop settings, per-team overrides and pose selection to keep every team headshot on-brand.","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fenforcing-consistency","enforcing-consistency",{"title":413,"description":414,"path":415,"dir":395,"slug":416},"Headshots Still Preparing","What to expect while a member's headshots generate, and what to do when a shoot looks stuck","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fheadshots-still-preparing","headshots-still-preparing",{"title":418,"description":419,"path":420,"dir":395,"slug":421},"Issuing Retries","How a team member gets a free retry, and how you start a new shoot for them when the retry is used up","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fissuing-retries","issuing-retries",{"title":423,"description":424,"path":425,"dir":395,"slug":426},"Managing Profile Picture Templates","How to edit, delete, set a default, and apply profile picture templates to organization members.","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fmanaging-templates","managing-templates",{"title":428,"description":429,"path":430,"dir":395,"slug":431},"Pose Selection","Restrict which body poses HeadshotPro cycles through when generating headshots for your team.","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fpose-selection","pose-selection",{"title":433,"description":434,"path":435,"dir":395,"slug":436},"Quality Tips","What to tell your team before they upload selfies, and why results sometimes differ from the person","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fquality-tips","quality-tips",{"title":438,"description":439,"path":440,"dir":395,"slug":441},"Style Presets","Choose the backdrops and outfits your team can use, add your own backdrops and outfits, and set a different look per team.","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fstyle-presets","style-presets",{"title":443,"description":444,"path":445,"dir":395,"slug":446},"Viewing Team Headshots","Track every member's shoot from Overview and Members, open their photos, and download headshots in the sizes your organization needs","\u002Fdocs\u002Fteam-lead\u002Fteam-headshots\u002Fviewing-team-headshots","viewing-team-headshots",[448,452,456,460,464],{"slug":449,"name":450,"articles":451},"billing","Billing",[284,290,295,300],{"slug":453,"name":454,"articles":455},"getting-started","Getting Started",[305,311,316,321,326,331],{"slug":457,"name":458,"articles":459},"integrations","Integrations",[336,342,347],{"slug":461,"name":462,"articles":463},"managing-your-team","Managing Your Team",[352,358,363,368,373,376,379,384,387,388],{"slug":465,"name":466,"articles":467},"team-headshots","Team Headshots",[391,397,402,407,412,417,422,427,432,437,442],[],false,1793939721514]