Blackbaud ID Overview
Blackbaud's secure authentication service is the central identity management system for Blackbaud solutions that provides a single identity to access Blackbaud solutions and services. When you're invited to use a Blackbaud solution, your Blackbaud ID identifies you and facilitates access as you move across Blackbaud's suite of solutions and services.
Benefits
With Blackbaud ID, you use your email address to securely sign in to Blackbaud solutions and services. Your Blackbaud ID provides a variety of benefits:
-
Blackbaud ID allows you to securely sign in to the Blackbaud solutions ecosystem. By default, it uses Blackbaud's secure authentication service, but users can opt to authenticate through social sign-in. And organizations can enable single sign-on (SSO) to manage user access through their identity provider (IdP).
-
Blackbaud ID provides enhanced password protection and brute force protection on all login attempts.
-
Blackbaud ID offers multi-factor authentication (MFA) to enhance security through text messages or mobile authenticators.
-
Blackbaud ID provides secure access to multiple Blackbaud solutions and Support resources.
-
Users can authenticate through social sign-in to use a social networking service, such as Apple, Facebook, Google, and Microsoft, for authentication requirements, password resets, and other support needs.
Supported Solutions
Your Blackbaud ID allows you to securely sign in to Blackbaud solutions and services.
Sign-in Options
On the Blackbaud ID sign-in page, you select your authentication method and then enter credentials to securely access Blackbaud solutions and services, Support resources, and your Blackbaud profile.
-
If your organization enables single sign-on (SSO), select Continue with SSO and then enter your email address and select Continue. The sign-in page redirects you to your IdP's login to sign in with your organization credentials and authenticate through the IdP. SSO allows you to move securely between Blackbaud solutions and other cloud services without providing credentials each time. It also gives your organization control of password requirements and other authentication policies. The optimal authentication for organizations is to enable SSO and then enforce MFA.
Warning: If your email address isn't in a domain claimed by an SSO connection, then you are redirected to either authenticate through a different method or to create a new Blackbaud ID. If you think this is a mistake, check the displayed email address. If it's incorrect, return to the sign-in page and re-enter it. Otherwise, contact your organization admin or sign in using a different method.
-
To authenticate through social sign-in using credentials from a social networking service, such as Apple, Facebook, Google, and Microsoft, select the Continue with option for your social networking service. The sign-in page redirects you to your social networking service's login where you provide your email address and follow their steps for authentication. Social sign-in uses the social networking service for authentication requirements, password resets, and other support needs.
-
To authenticate through Blackbaud's secure service, select Continue with Email and then provide your email address and password. In most cases, you also need to provide a 6-digit confirmation code for MFA. Blackbaud requires MFA on Blackbaud IDs that authenticate through Blackbaud's authentication service and that are direct users of Blackbaud solutions because it's the most effective measure to increase security. For more information, see authentication settings.
Note: The first time you sign in with your Blackbaud ID, you enter your email address and then select Send confirmation code. This sends a code to your email address to confirm your identity. After you retrieve this code, you enter it in the Confirm code field on the sign-in page. The code expires after 10 minutes, but you can select Send new code to get a new one. After the code confirms your identity, you need to provide and confirm your password and then provide your first and last name.
To ensure that your Blackbaud ID is secure, the sign-in experience also uses reCAPTCHA to mitigate fraud and abuse on your account.
reCAPTCHA for Enhanced Security
Your Blackbaud ID identifies you so that you can safely and securely sign in to Blackbaud solutions. When you sign in, your Blackbaud ID further protects your Blackbaud solutions by using reCAPTCHA to detect and prevent abusive activities from automated software.
reCAPTCHA is enabled for your protection, and it does not prevent access for legitimate users. If reCAPTCHA suspects that traffic is from a bot when you sign in, it triggers a process where Blackbaud emails you a one-time passcode that you can use to confirm your identity and sign in to your Blackbaud solutions. For troubleshooting details, see the reCAPTCHA FAQ item. And for more information, see the reCAPTCHA documentation.
Custom Branding
Organizations can define branding elements for the Blackbaud ID authentication experience, such as the display name, logos, and colors. They can also create branded content, such as a custom summary or a custom help link. When organizations define these branding elements, the Blackbaud ID authentication pages emphasize the organization's branding to help users recognize the organization and trust the connection to Blackbaud solutions.
If you use your Blackbaud ID to access Blackbaud solutions and services for multiple organizations, then the look and feel of the authentication pages may change for each organization. This doesn't impact how authentication works, and you can use the same Blackbaud ID regardless of the branding.
Note: Organization admins who want to configure their branding elements can find guidance in Branding.