---
title: "Secure Mattermost"
---
Mattermost ships with several security features that can help organizations safeguard their data. Mattermost Enterprise Edition includes features designed to offer extra layers of security protection.

- [Encryption options](/deployment-guide/encryption-options) - Setup encryption for data in transit and at rest.
- [Transport encryption](/deployment-guide/transport-encryption) - Secure data in transit between Mattermost and other services.
- [Multi-factor authentication](/administration-guide/onboard/multi-factor-authentication) - Require users to provide a secure one-time code in addition to their username and password to log in to Mattermost.
- [ID-only push notifications](/administration-guide/configure/push-notification-server-configuration-settings#id-only-push-notifications) - Enable fully private mobile notifications to protect against iOS and Android notification infrastructure breaches.
- [Enterprise mobility management](/deployment-guide/mobile/deploy-mobile-apps-using-emm-provider) - Secure mobile endpoints with management application configuration.
- [Delegated granular administration](/administration-guide/onboard/delegated-granular-administration) - Grant user access to specific areas of the Mattermost System Console.
- [Custom terms of service](/administration-guide/comply/custom-terms-of-service) - Increase clarity on legal Mattermost expectations for internal employees and guests.
- [Manage session length](/administration-guide/configure/environment-configuration-settings#session-lengths) - Control how long user sessions remain active.
- [User and group provisioning via AD/LDAP](/administration-guide/onboard/ad-ldap-groups-synchronization) - Provision and synchronize users and groups to pre-defined roles.
- [SAML-based single sign-on (SSO)](/administration-guide/onboard/sso-saml) - Enable login using a single user ID and password managed through a SAML 2.0 Service Provider.
- [SAML SSO technical documentation](/administration-guide/onboard/sso-saml-technical) - Technical details on SAML SSO.
- [Certificate-based authentication](/administration-guide/onboard/certificate-based-authentication) - Identify a user or a device before granting access to Mattermost.
- [Manage file sharing and downloads](/administration-guide/configure/site-configuration-settings#file-sharing-and-downloads) - Control file sharing and downloads in Mattermost.
- [Log path restrictions](/administration-guide/manage/logging#log-path-restrictions) - Restrict log file locations to authorized directories for enhanced access control and configuration integrity.