[Yandex Cloud documentation](../../../index.md) > [Yandex Identity Hub](../../index.md) > [Step-by-step guides](../index.md) > Authentication > Managing authentication policies > Activating/deactivating an authentication policy

# Activating/deactivating an authentication policy

{% note info %}

This feature is at the [Preview](../../../overview/concepts/launch-stages.md) stage.

{% endnote %}

In Yandex Identity Hub, [authentication policies](../../concepts/authentication-policy.md) are used for granular management of [user](*user_accounts) and [user group](*user_groups) access to Yandex Identity Hub [applications](*applications) by denying or allowing authentication based on the policy criteria.

[*user_groups]: You can group Yandex Identity Hub users to simplify access management in Yandex Cloud. For more information, see [User groups](../../concepts/groups.md).

[*applications]: Yandex Identity Hub SAML and OIDC applications allow Yandex Cloud users to authenticate in services of third-party service providers. For more information, see [Applications in Yandex Identity Hub](../../concepts/applications.md).

[*user_accounts]: Yandex Cloud uses Yandex accounts as well as federated and local user accounts. For more information, see [Accounts in Yandex Cloud](../../../iam/concepts/users/accounts.md).

[*organization]: An organization is the highest resource in the Yandex Cloud resource model hierarchy that consolidates the resources of all other services. It is also used for user management as well as authentication and authorization management. For more information, see [Organization](../../concepts/organization.md).

Authentication policies can be managed by users with the `organization-manager.admin` [role](*org_manager_admin) or higher.

[*org_manager_admin]: The `organization-manager.admin` role enables managing organization settings, identity federations, user pools, SAML applications, OIDC applications, users and user groups, and users' access permissions to the organization and its resources. To learn more, see [Access management in Yandex Identity Hub](../../security/index.md#organization-manager-admin).

## Activate an authentication policy {#activate}

To activate an authentication policy, follow these steps:

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Log in to [Yandex Identity Hub](https://center.yandex.cloud/organization).
  1. In the left-hand panel, select ![shield](../../../_assets/console-icons/shield.svg) **Security settings** and go to the **Authentication policies** tab.
  1. In the row with an inactive authentication policy, click ![ellipsis](../../../_assets/console-icons/ellipsis.svg) and select ![arrows-rotate-right](../../../_assets/console-icons/arrows-rotate-right.svg) **Activate**.
  1. In the window that opens, confirm the policy activation.

{% endlist %}

## Deactivate an authentication policy {#deactivate}

To deactivate an authentication policy, follow these steps:

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Log in to [Yandex Identity Hub](https://center.yandex.cloud/organization).
  1. In the left-hand panel, select ![shield](../../../_assets/console-icons/shield.svg) **Security settings** and go to the **Authentication policies** tab.
  1. In the row with an active authentication policy, click ![ellipsis](../../../_assets/console-icons/ellipsis.svg) and select ![pause](../../../_assets/console-icons/pause.svg) **Deactivate**.
  1. In the window that opens, confirm the policy deactivation.

{% endlist %}

#### Useful links {#see-also}

* [Applications in Yandex Identity Hub](../../concepts/applications.md)
* [Authentication policies in Yandex Identity Hub](../../concepts/authentication-policy.md)
* [Creating an authentication policy](create.md)
* [Editing an authentication policy](update.md)