Skip to main content
This page explains every way into the product — the two-step sign-in screen, the providers that may appear on it, accepting an invitation, and recovering a forgotten password. The sign-in screen The sign-in screen

Signing in

Sign-in is two steps. The first step decides what the second shows. Depending on how your organisation is set up, after Continue you may see a password box, a button for your organisation’s identity provider, a password box labelled with your directory’s name, or more than one of these.
The sign-in page’s logo, cover image, headline and help desk link follow what your organisation has set under Branding, so it looks different at each organisation’s own address.

Google and Microsoft

Where your installation has configured them, Continue with Google and Continue with Microsoft appear on the first step. Signing in with a provider still requires an account here — the provider proves who you are, and your account decides what you may do. A verified work address from Google or Microsoft is matched to the account with the same address.

Your organisation’s own sign-in

Your organisation can connect its own identity provider or directory under identity providers. Where it has: If an organisation has no sign-in method configured at all, the screen says so and that an administrator needs to look at its authentication settings.

Accepting an invitation

Most accounts start as an invitation. The email you were added under receives a link that opens Choose a password: Set password and continue finishes it. Your account is ready confirms the address you sign in with, and Go to sign in takes you to the sign-in screen, where you sign in the way you will every day. Already have a password? Sign in skips straight there.
An invitation link lasts a week and works once. If it has expired, ask whoever invited you to send it again — there is no “forgot password” for an account that has never signed in. A link that was copied incompletely says so: copy the whole address from the email, including everything after ?token=.

First sign-in with a password somebody set for you

Some accounts are created with a password an administrator chose — usually for somebody with no email address. Because somebody else knows it, the first sign-in asks you to Choose a password: your Current password, then a New password, and Save and continue.

Two-step sign-in

Where your organisation uses it, signing in with a password asks for a second step under Two-step sign-in: a code from an authenticator app, or one of your recovery codes if your phone is lost. If your organisation requires it and you have not set it up, you are walked through it at sign-in — a QR code to scan and a set of recovery codes shown once. Keep the codes somewhere safe straight away. This applies to password sign-in only; your organisation’s own identity provider handles its own second step. See authentication policy.

An expired password

Where your organisation sets passwords to expire, a correct but expired password shows That password has expired and asks you to choose a new one before carrying on.

Forgotten password

The forgotten password screen The forgotten password screen Forgot password? opens Forgot your password?. Enter your Email and press Send reset link. Nothing arrived? Check the spam folder and make sure the address is the one your account uses — Try another address lets you send again. The link opens Choose a new password (New password, Type it again, Set password). Password changed confirms it, and any lockout on the account is cleared. An administrator can also set you a password directly from people and access.

Changing your password

From your profile, with your current password.

Signing in on a handset

The field app uses the same email or username and password, and also sets a device passcode that encrypts the data held on the handset. That passcode belongs to the device and cannot be recovered by anybody.

Sessions

A session renews while you are working and ends after a period of inactivity, and after an absolute limit however active you have been. Your administrator sets both under authentication policy.