Recovery account for SSO

How to configure and use a recovery account for your enterprise in case you use Single Sign-On.

Enterprise administrators can use the recovery account feature to regain access to their enterprise if Single Sign-On (SSO) login becomes unavailable. This process uses a recovery-specific password combined with a one-time verification code delivered via email.

Configuring a recovery account is strongly advised for all enterprise administrators.

Configuring your recovery account

You must be an enterprise admin and you must use your SSO account.

Proceed as follows:

1. Log in to SonarQube Cloud with your SSO account and select the account icon in the top right corner.
2. In the menu, select My account. The My account page opens.
3. In Recovery account, select the Generate recovery password button. A password is generated.
4. Select Copy to copy the password and keep it in a safe place. The password will not be visible anymore once you’ve left the page.

The recovery account status is set to Active on the page.

You can access directly the My account page from the SSO & provisioning page through the Additional configuration > Recovery account section.

Using the recovery access

If you lost access to your enterprise through SSO, proceed as follows:

1. On the Log in with Single Sign-On page, select the Use recovery access link at the bottom.
2. The Recover access page opens.
3. Enter the email address associated with your enterprise admin’s SSO account.
4. Enter your recovery password.
5. Select Confirm. The Verify your email address page opens.
6. Enter the verification code received via email and select Submit.

Rotating your recovery password

For security reasons, it's recommended to rotate your recovery password regularly:

1. Log in to SonarQube Cloud with your enterprise admin's SSO account.
2. Select the account icon in the top right corner.
3. In the menu, select My account. The My account page opens.
4. In Recovery account, select Rotate password. A new password is generated.
5. Select Copy to copy the password and keep it in a safe place. The password will not be visible anymore once you’ve left the page.

Disabling your recovery account

1. Log in to SonarQube Cloud with your enterprise admin's SSO account.
2. Select the account icon in the top right corner.
3. In the menu, select My account. The My account page opens.
4. In Recovery account, select Disable access and confirm.

Recovery password format

Recovery passwords follow these rules:

• Length: 30 characters
• Characters: Uppercase (A–Z), lowercase (a–z), digits (0–9), and special characters (!@#$%^&)
• Repetition: No more than 2 identical characters in a row

Related pages

• Set up SSO

• About SSO and provisioning

• Recovering enterprise admin access

• Recovering organization admin access

• Recovering project admin access