Settings

Who this is for

Workspace owners and admins responsible for configuring how the Nuxari workspace is secured and how it behaves for all users.

Where to find settings

In Nuxari, click the workspace name in the top navigation bar and select Settings. Most settings require the Admin or Owner role.

Organization profile

The organization profile section lets you update:

• ·Organization name, displayed in the workspace header and in exported reports.
• ·Primary contact email, used for billing and security notifications.
• ·Time zone, determines how times are displayed in audit logs and scheduled jobs.
• ·Workspace slug, the URL identifier for your organization.

Security policy

Configure the security rules that apply to all users in the workspace:

• ·MFA enforcement: Require all workspace members to use multi-factor authentication. Users who have not enabled MFA are blocked from the platform until they comply. Recommended for all production workspaces.
• ·Password minimum length: Set the minimum character requirement for user passwords. The default is 12 characters.
• ·Session timeout: Define how long an idle user session remains active before requiring re-authentication.
• ·Domain allowlist: Restrict account invitations and self-service sign-up to specific email domains. For example, allowing only @yourcompany.com prevents external users from joining your workspace.
• ·Invite expiry: Set how long an invitation link remains valid. The default is 72 hours.

Identity provider (SSO)

If your organization uses a centralized identity provider, configure SSO in the Identity Provider section. Once configured, users can authenticate through your IdP instead of a Nuxari-managed password. Nuxari supports SAML 2.0 and OIDC. SeeIntegrations for setup instructions.

Notification settings

The Notifications section in Settings controls workspace-level notification behavior: which channels receive alerts for critical findings, which email addresses receive weekly reports, and how approval request notifications are delivered. Individual users can also configure their personal notification preferences from their profile. SeeNotifications for the full reference.

Audit trail for settings changes

Every change made in Settings, including policy changes, user invitations, role changes, and SSO configuration, is recorded as an audit event in theAudit Log. The audit trail captures who made the change, what was changed, and when.