---
title: Legacy Windsurf Auth
description: Authenticate to Devin CLI using your existing legacy Windsurf enterprise account
icon: "key"
---

import SubagentBillingNote from "/snippets/subagent-billing-note.mdx";
import CredentialsFileLocation from "/snippets/credentials-file-location.mdx";

## Overview

Enterprise users can authenticate to Devin CLI using their existing legacy Windsurf enterprise accounts. This provides a seamless experience for organizations already using Windsurf, with billing handled through the standard **Windsurf legacy credit model**.

User management, team organization, SSO, RBAC, billing, and consumption are all inherited natively through the Windsurf dashboard. For most of your organizational needs, you should rely on the [Windsurf dashboard](https://windsurf.com).

<Note>
Legacy Windsurf authentication for Devin CLI is available to **legacy Windsurf Enterprise** customers. Contact your account executive if you have questions about authentication, billing, or access.
</Note>

## Getting Started

### Prerequisites

Before using legacy Windsurf authentication, ensure that:

1. Your organization has a legacy Windsurf enterprise account
2. You have an active legacy Windsurf user account that can use the agentic tools

<Tip>
No additional permissions are required to access Devin CLI. If your legacy Windsurf enterprise users can use Windsurf, they can use Devin CLI.
</Tip>

### Installation via Devin Desktop

Devin CLI is bundled with Devin Desktop. An admin must first enable the option in [Devin CLI Team Settings](https://windsurf.com/team/cli-settings) — see [Team Settings](/cli/enterprise/team-settings#show-install-devin-cli-in-the-devin-desktop-command-palette) for details.

Once enabled, open the Command Palette (<code>Cmd+Shift+P</code> / <code>Ctrl+Shift+P</code>) and run **Install Devin CLI**.

Alternatively, you can install using the standalone installer — see the [Quickstart](/cli/) for instructions.

### Authenticating

To authenticate with your legacy Windsurf enterprise account:

```bash
devin auth login
```

Follow the prompts and be sure to select the **Log in with Windsurf for Enterprise** option to authenticate through your organization's identity provider.

<CredentialsFileLocation />

## Billing & Analytics

Usage through Devin CLI is billed using the standard **Windsurf legacy credit model**. All Devin CLI usage counts toward your organization's existing legacy Windsurf enterprise allocation.

The analytics and billing systems are shared between Windsurf and Devin CLI. Use the [Team Members dashboard](https://windsurf.com/team/members) to manage team organization or view consumption metrics across both products.

<SubagentBillingNote />

Enterprise admins can also access usage analytics programmatically through the [Analytics API](/desktop/accounts/api-reference/api-introduction) to monitor consumption across their organization.

For details about credit billing and usage tracking, refer to your enterprise agreement or contact your account executive.

## Further Reading

For more information about legacy Windsurf enterprise features, see the [Devin Desktop documentation](/desktop/getting-started):

- [Guide for Admins](/desktop/guide-for-admins) — Administration and team management
- [SSO & SCIM](/desktop/accounts/sso-scim) — Single sign-on and user provisioning
- [API Reference](/desktop/accounts/api-reference/api-introduction) — Access analytics and usage data
