Signing in

Invitations, passwords, the second step, and the pages you may land on instead.

Screens: /sign-in · /two-factor · /security-setup · /forgot-password · /reset-password · /verify-email · /accept-invitation · /no-access · /account-suspended

Your account

There are two ways in:

  • People who work at the firm sign in with their firm Google account. The first time, their account here is made for them.
  • The firm's clients sign in with a link sent to their email.

There is no sign-up page and no password to choose.

Continue with Google

If the firm has connected its Google Workspace, staff sign in with Continue with Google: choose your firm Google account, and you return here signed in.

The first time, your account is created:

  • If a partner prepared your profile, you take it over, with the clients and work already assigned to you.
  • Otherwise you join the team: you read every client and job, and act on the jobs you are on, until a partner changes it in Team.

After that, what you may reach is what a partner recorded, never what Google says.

Google asks for the second step: the firm's Workspace requires it of the whole domain, so this system does not ask again.

These are turned away with one sentence, the same for every reason:

  • a Google account outside the firm's domain;
  • a client's portal account;
  • a member of staff who was suspended or retired.

A message that told an unknown address from a suspended one would tell anybody who works here.

Sign in with a password

A deployment with no Google Workspace connected offers a password instead: Sign in asks for your Email address and Password. The password alone opens nothing: every account confirms sign-in with a second step before reaching any client information.

The second step

This applies only where you sign in with a password.

Set up two-step authentication runs once, the first time you sign in:

  1. Confirm your password.
  2. Add the account to an authenticator app on your phone: scan the code or type the key.
  3. Save your Recovery codes somewhere safe.
  4. Type the current six-digit code and Finish setup.

From then on, after your password, One more step asks for the Six-digit code from the app. A new one appears every thirty seconds.

Without your phone, Use a backup code: one of the recovery codes you saved. Each works once. Use the app instead switches back.

A deployment being demonstrated can run with this step waived. Every page then carries a line saying so: on that deployment a password alone protects the records, and it is not how the firm will run.

Clients sign in with a link

A client of the firm has no password. Under Clients, enter your email address and Get a sign-in link. A message from the firm arrives with a link that opens the portal. It lasts ten minutes and works once.

The reply on screen is the same for every address, so the form never tells anybody which people and businesses the firm works with. If no link arrives, the firm has not given that address portal access: ask the firm rather than trying again.

Your mailbox protects your file. Nobody at the firm can read your mail, and nobody who cannot read it can open your file. If you think somebody else has reached your mailbox, tell the firm the same day.

Forgotten password

Staff sign in with Google and clients with a link, so most people have no password. An account that still has one is reset by a partner, who sends a fresh link without seeing or setting the password.

The link leads to Set a new password. A link that has been cut short asks you to request another.

Pages you may land on instead

  • Confirm your email address: your address is not confirmed yet. Open the link sent when the account was created. If it has expired, ask a partner to send another.
  • Nothing to show you: your account is proven but holds no place in any firm and no portal grant yet. This is normal after accepting an invitation before anything was granted. Ask whoever invited you.
  • Account suspended: nothing has been deleted, and it can be reinstated. A partner can lift it. Every suspension and reinstatement is recorded.

Signing out

Sign out is at the foot of the staff rail and at the end of the portal's header. It ends the session completely, from any page, and does not leave you on a client's record. On a shared machine, use it.

Emails you may receive

Email: your sign-in link

When
When a client asks for a link on the sign-in page.
What it says
Subject "Your sign-in link", with a link that works once and expires shortly.
What to do
Open the link to sign in.