Account & Sign-in

This page covers everything about getting into your SalesOS account and keeping it secure: passwords, email verification, two-factor authentication (2FA), account recovery, signed-in sessions and single sign-on.

Resetting your password

1. On the sign-in page, click Forgot password? under the password field.
2. Enter the email address you sign in with and click Send reset link.
3. Check your inbox. If there is a SalesOS account for that address, you receive a link to choose a new password. It can take a few minutes to arrive, so check your spam folder too.
4. Open the link. It takes you to the reset page, where you enter and confirm the new password, then click Reset Password.

The reset link expires after 30 minutes. If it has expired, request a new one from the sign-in page.

New passwords must be at least 12 characters and include an uppercase letter, a lowercase letter, a number and a symbol.

If you know your current password and just want to change it, go to Settings → My profile, open the Security tab and use Change Password.

When the sign-in page asks for single sign-on

If your organization requires single sign-on (SSO) for your email domain, password sign-in is blocked for that domain. After you enter your email, the sign-in page shows Continue with single sign-on and the note "Your organization requires single sign-on for this email domain." Click it to sign in through your company's identity provider. Password resets don't apply to these accounts. Contact your company's IT team if you can't sign in through the identity provider. Admins can read Single Sign-On & SCIM.

Signing in with Google, Microsoft, Apple, LinkedIn or GitHub

When your SalesOS site has social sign-in turned on, the sign-in and sign-up pages show Continue with buttons above the email form. You can connect more than one of them to your account, and add a password to an account you created with one, under Settings → Security → Sign-in methods. See Sign in with Google, Microsoft and more.

Verifying your email

When you sign up with a password, SalesOS emails you a verification link. Click it to confirm your address. The link is valid for 48 hours.

Verification doesn't block you from using SalesOS. Until you verify, a Verify your email notice appears under the header. Click Resend link in that notice to get a fresh email. You can also ask for one from the Help panel. If you open an old link after you have already verified, SalesOS tells you your email is already verified.

Accounts created from a team invitation, through single sign-on or with a social provider are verified automatically.

Two-factor authentication

Two-factor authentication asks for a 6-digit code from an authenticator app, such as Google Authenticator, 1Password or Authy, each time you sign in on a new device.

Turning on 2FA

1. Open Security Settings at /dashboard/settings/security. Admins can also find it at Settings → Security & access → Security.
2. Under Two-Factor Authentication, click Enable 2FA.
3. Scan QR Code: scan the code with your authenticator app. If you can't scan it, type in the key shown under "Can't scan? Enter this code manually".
4. Verify Code: enter the 6-digit code from the app.
5. Save Backup Codes: SalesOS shows 10 backup codes. Copy them and store them somewhere safe, such as a password manager.

When you sign in, you can tick Trust this device so that device doesn't ask for a code every time. Trusted devices are listed under Trusted Devices on the same page, where you can remove any you don't recognize.

Backup codes

Each backup code works once, in place of an authenticator code. On the sign-in verification screen, type a backup code in the Verification code field.

To see how many codes you have left, click View Codes under Backup Codes. To replace them all, regenerate them and confirm with your password. Your old codes stop working straight away.

Turning off 2FA

Click Disable under Two-Factor Authentication and confirm with your password. If your organization requires 2FA, you'll be asked to set it up again the next time you sign in.

Organization policy

Admins can require 2FA for everyone under 2FA Enforcement Policy on the Security Settings page, with separate switches for all users, admins and managers. Members covered by the policy are taken to a setup screen at sign-in until they turn 2FA on.

Recovering a lost device

If you have lost your authenticator device and your backup codes, you can remove 2FA from your account yourself:

1. On the two-factor verification screen, click Lost your device and backup codes?. You can also go straight to www.salesos.org/account-recovery.
2. Enter your email address. SalesOS always shows the same confirmation, whether or not the account exists.
3. If the account has 2FA, you receive a recovery link. A separate email warns that someone asked to remove 2FA, with a link to cancel the request.
4. Wait 24 hours. This cooling-off period protects you if someone else started the request. The recovery page tells you the time after which you can finish.
5. After the waiting period, open the link and enter your account password to finish.

When recovery completes, 2FA is turned off, every session is signed out, and you get a confirmation email. If your organization requires 2FA, you'll set it up again at your next sign-in.

If you didn't ask for recovery, click the cancel link in the warning email straight away, then change your password.

Where you're signed in

The Where you're signed in list on the Security Settings page shows each browser or device signed in to your account, with a browser and device label, a partial IP address and when it was last active. Your current session is marked.

• Click Revoke on a row to sign that device out.
• Click Sign out of all other sessions to sign out everywhere except the device you are using.
• If the list only shows Only this device, no other sessions are active.

You can't revoke your current session from the list. Use sign out instead, from Settings → My profile → Security → Sign out.

Still stuck?

If none of this gets you in, use www.salesos.org/support, which works without signing in. See Getting Help.