40 lines
2.6 KiB
Markdown
40 lines
2.6 KiB
Markdown
---
|
|
title: "Accounts and signing in"
|
|
tagline: "One account for your organization's apps, protected by Authelia."
|
|
weight: 20
|
|
---
|
|
|
|
## One account, many apps
|
|
|
|
People in your organization are created once, in Superpanel. That account is stored in a central user directory on your server, and most applications check sign-ins against it. In practice this means:
|
|
|
|
- The **same username and password** work across the apps that are connected to the directory.
|
|
- When someone's password changes, it changes everywhere.
|
|
- When someone leaves and their account is disabled in Superpanel, they lose access to the connected apps at the same time.
|
|
|
|
Many apps also sign you in through [Authelia](/apps/authelia/), the single sign-on portal. When you open one of these apps and aren't signed in yet, you are sent to the Authelia sign-in page first, then returned to the app.
|
|
|
|
{{< note title="Some apps keep their own accounts" >}}
|
|
A few applications are designed for people outside your organization or hold especially sensitive data, so they use separate accounts. Examples include [Vaultwarden](/apps/vaultwarden/) (your password vault has its own master password), and public-facing community or newsletter features in [Discourse](/apps/discourse/) and [Listmonk](/apps/listmonk/). Each application's page says how sign-in works for that app.
|
|
{{< /note >}}
|
|
|
|
## Signing in for the first time
|
|
|
|
1. Look for the welcome email from your administrator or from Federated Computer. It contains your username and either a temporary password or a link to set one.
|
|
2. Open any application address on your domain. If you're sent to the Authelia portal, enter your username and password there.
|
|
|
|
{{< screenshot src="authelia/sign-in.png" alt="The Authelia sign-in page with username and password fields" caption="The Authelia sign-in page." >}}
|
|
|
|
3. If your organization requires two-factor authentication, Authelia will ask you to register a second factor. See [Set up two-factor authentication](/apps/authelia/#set-up-two-factor-authentication).
|
|
4. Change any temporary password straight away.
|
|
|
|
## Forgotten passwords
|
|
|
|
Use the **Reset password** link on the Authelia sign-in page. A reset link is sent to the email address on your account. If you no longer have access to that mailbox, ask an administrator to reset your password in Superpanel.
|
|
|
|
## Good habits
|
|
|
|
- Turn on two-factor authentication, even if it's optional for your organization.
|
|
- Store your password in [Vaultwarden](/apps/vaultwarden/) rather than reusing it.
|
|
- Sign out on shared computers. Signing out of Authelia ends your single sign-on session for all connected apps.
|