{"id":514599,"date":"2025-12-01T15:48:13","date_gmt":"2025-12-01T15:48:13","guid":{"rendered":"https:\/\/userpilot.com\/blog\/?p=514599"},"modified":"2026-04-06T22:58:53","modified_gmt":"2026-04-06T22:58:53","slug":"fullstory-login","status":"publish","type":"post","link":"https:\/\/userpilot.com\/blog\/fullstory-login\/","title":{"rendered":"Fullstory Login Settings: How to Access Your Account Safely"},"content":{"rendered":"

Whether you are an individual user or an admin at a larger business, all Fullstory login options are fitting for most account management needs.<\/p>\n

Let’s go over how you can access your account safely, how SSO works in Fullstory, and how to enhance the login process so you can analyze user engagement<\/a> without security risks.<\/p>\n

<\/p>\n

\n

<\/p>\n

<\/div>\n<\/div>\n

What is Fullstory?<\/h2>\n

Fullstory<\/a>is a journey analytics platform that provides visibility over users on both web and mobile apps. It’s known for its conversion funnels<\/a> (e.g., to track purchase or sign-up steps) and trusted session replays with high fidelity.<\/p>\n

For product, UX, and customer support teams. Fullstory is best for diagnosing usability issues, fixing bugs, and building deep empathy with users.<\/p>\n

\"Fullstory<\/a>
Fullstory session replays on browser visits.<\/figcaption><\/figure>\n

Fullstory security methods for logging in<\/h2>\n

For new users, the standard is to log in using email and password. You head to the login page, enter your credentials, and you are in.<\/p>\n

However, Fullstory support cannot manually grant you access if you lose your email. This protects you from social engineering attacks, but it also means you are on your own if you lose access to your email account.<\/p>\n

To add extra layers of security, there are two other ways to access the Fullstory app:<\/p>\n

1. Google authentication<\/h3>\n

Fullstory\u2019s Google Authentication (“Sign in with Google”) uses your Google identity to link your account and let you sign in with one click. It reduces time to value<\/a> for internal teams if they’re all logged into their work Chrome profile.<\/p>\n

Additionally, admins can enforce this to secure operations. All you have to do is toggle the “Require Google Sign-In”<\/strong> option in Settings > Account Management > Users<\/strong>.<\/p>\n

This removes password-related vulnerabilities (since 65% of employees use variations of the same password<\/a> across multiple sites) and eliminates the risk of ex-employees keeping access to the platform.<\/p>\n

\"Fullstory<\/a>
Fullstory login services.<\/figcaption><\/figure>\n

2. Single Sign-On (SSO) for enterprises<\/h3>\n

For enterprise accounts, Fullstory supports SSO via SAML 2.0. Integrating with Identity Providers (IdPs) like Okta, Azure AD, or OneLogin to make provisioning easier.<\/p>\n

Setting it up requires an Admin role in Fullstory and Super Admin access in your IdP. Navigate to Settings > Account Management > SSO<\/strong> to set up the metadata exchange:<\/p>\n

    \n
  1. Copy data:<\/strong> Extract the Entity ID<\/em> and ACS URL<\/em> from Fullstory. Paste these into your IdP (e.g., Okta) application settings.<\/li>\n
  2. Generate XML:<\/strong> Have your IdP generate a metadata XML file containing your X.509 certificates and login URLs.<\/li>\n
  3. Upload metadata:<\/strong> Paste that XML back into Fullstory to complete the integration.<\/li>\n
  4. Test:<\/strong> Use a dedicated incognito window to test the login flow before enforcing it organization-wide. If you enforce it and the certificate is wrong, you will lock everyone (including yourself) out of the account.<\/li>\n<\/ol>\n
    \"Fullstory<\/a>
    Fullstory inc SSO privacy settings.<\/figcaption><\/figure>\n

    Additionally, you can further enhance your SSO settings by:<\/p>\n

    a) Mapping roles to IdP Groups<\/h4>\n

    You can map your IdP groups to Fullstory roles using the `memberOf` attribute (or custom attribute, depending on your IdP). For instance:<\/p>\n