Security Updates: 2FA, SSO, and SOC 2

This post covers the latest security updates across the Flockler platform: two-factor authentication, single sign-on, SOC 2 Type I, and updated compliance documentation. 

Two-Factor Authentication

Social media accounts connected to Flockler represent real brand risk if compromised. 2FA adds a second layer of verification to every login, requiring both a password and a one-time code from a standard authenticator app.

2FA is available to all users across all plans and can be enabled in your account settings. For organizations where it's a formal IT or procurement requirement, it's in place and ready to verify.

For teams that need to go further, an enforce feature is coming for Pro plan users and above. Once available, account admins will be able to make 2FA mandatory across all users on their account rather than leaving it as an individual opt-in.

Full setup instructions are in the Flockler help center.

Single Sign-On 

Managing access across a growing team through individual credentials creates risk. When someone leaves, every app needs to be updated manually. SSO solves that problem by connecting Flockler to your existing identity provider, so access is centrally controlled through the tools your IT team already manages.

SSO is available on higher-tier Flockler plans. What's included:

• Domain enforcement
• Group-to-role mapping
• Audit logging
• SCIM directory sync for managing access entirely from your identity provider
• Support for Okta, Microsoft Entra ID, Google Workspace, and OneLogin

With SCIM enabled, adding or removing a team member's access to Flockler is handled directly from your identity provider, with no separate offboarding steps required in Flockler.

SSO setup requires IT admin involvement, including DNS configuration and connection to the identity provider. If you're on an eligible plan and want to get started, contact the team, and we'll help connect the right people on both sides to get it configured.

If SSO is something your organization needs and you're not yet on an eligible plan, take a look at our pricing page to see what's available.

SOC 2 Type I

For organizations with formal vendor security assessment processes, a SOC 2 report is often a requirement before a tool can be approved. It provides independent, third-party verification of a platform's security controls rather than relying on self-reported claims.

Flockler has completed a SOC 2 Type I examination, a formal independent assessment of our security controls at a point in time, covering how we handle data security, availability, and confidentiality.

SOC 2 Type II is currently in progress, with the observation window closed as of July 15. The Type II report, which covers our controls over an extended period, is expected later this year.

If you need access to the SOC 2 Type I report for a vendor security assessment, get in touch.

Updated Compliance Documentation

A security review rarely stops at authentication. Legal and procurement teams typically require a current DPA, a subprocessor list, and a privacy policy that accurately reflects the vendor's entity structure before they can sign off. The following documents are available on request:

• Data Processing Agreement: updated to reflect our current entity structure
• Subprocessor list: maintained and available on request
• Privacy policy: updated to reflect our current entity structure

If you need any of them for a vendor assessment or procurement review, contact the team, and we'll get them to you.

Security That Works for Your Team

Authentication, compliance documentation, and independent audits were once requirements reserved for the largest enterprise vendors. That bar has moved. Mid-market procurement teams now run the same rigorous assessments, and the expectation is that any tool handling brand-sensitive data can meet it. These updates mean Flockler can.

Questions

If you have questions about any of these updates, including setting up 2FA, starting the SSO configuration process, or requesting compliance documentation, reach out via chat on the Flockler website or visit the help center.

For a full overview of what Flockler offers for enterprise teams, visit our enterprise page.