Sign in to your workspace
Sign in at your own workspace URL — https://your-workspace.app.ontrackio.com — with a password or single sign-on (SSO), then complete a two-factor challenge if your account requires one. There's no shared central sign-in address.
:::note Before you begin
- Your workspace URL. It's in your welcome email (subject Your workspace is ready), your browser bookmarks, or from your administrator.
- An account in that workspace. Accounts are created by an administrator or your identity provider — there's no self-service account creation inside a workspace.
- For password sign-in: your email and password.
- For SSO: an account with the connected provider (Google, Microsoft, or a SAML provider such as Okta) under an approved company domain. :::
Open your workspace URL, not app.ontrackio.com/login. The central address shows a find your workspace page, not a sign-in form — there's no central email lookup.
Sign in with a password
- Go to your workspace URL, for example
https://your-workspace.app.ontrackio.com. The Sign in page opens. - Enter your account email in Email.
- Enter your password in Password.
- To stay signed in on this device, select Keep me signed in. Leave it cleared on shared or public computers.
- Select Sign in.
If your account has no two-factor authentication, your dashboard loads. If it does, continue to Complete the two-factor challenge.
The Sign in form takes these fields:
| Field | Required | Default | Notes |
|---|---|---|---|
| Yes | — | A valid email address. | |
| Password | Yes | — | Your account password. |
| Keep me signed in | No | Off | Keeps the session on this device. Clear it on shared computers. |
Sessions expire after 8 hours of inactivity, so you sign in again after a long break even with Keep me signed in selected.
Sign in with Google, Microsoft, or SAML
If your administrator has connected an SSO provider, the Sign in page shows a button for each one above the password fields.
-
Go to your workspace URL. The Sign in page opens.
-
Select your provider's button:
Button Provider Continue with Google Google Workspace Continue with Microsoft Microsoft Entra Continue with <provider>A SAML provider (Okta, JumpCloud, OneLogin, Entra). The label matches the connection name your administrator set. -
Finish sign-in with the provider in the window that opens. If you already have an active session with that provider, you return to your workspace automatically.
After the provider confirms your identity, your dashboard loads.
Access is restricted to approved company domains. If your provider account uses a domain your workspace doesn't allow, sign-in is refused. Check that you're using your work account, then contact your administrator if it still fails.
Complete the two-factor challenge
If your account has two-factor authentication (2FA) enabled, the Two-factor verification page opens after your password is accepted, reading Password accepted. Enter your code to continue. Complete it with one of the methods registered on your account.
Use an authenticator app code
- Open your authenticator app (for example Google Authenticator, Microsoft Authenticator, or 1Password) and find the 6-digit code for this workspace.
- Enter the code in 6-digit code from your authenticator app.
- Select Verify and sign in.
The code changes every 30 seconds. If a code is rejected, wait for the next one and try again.
Use a recovery code
If you can't reach your authenticator app, use a one-time recovery code from the set you saved when you set up 2FA.
- Select Lost your phone? Use a recovery code.
- Enter one of your saved codes in Recovery code.
- Select Use recovery code.
To abandon the challenge and start over as someone else, select Sign in as a different user.
Each recovery code works once and is invalidated after use. After signing in with one, generate a fresh set from your profile's two-factor settings so you don't run out.
Two-factor verification applies only after a password sign-in. SSO providers handle their own multi-factor requirements, so configure 2FA in your identity provider when you sign in with Google, Microsoft, or SAML.
Reset a forgotten password
Reset your password from your workspace URL. Password reset isn't available on the central app.ontrackio.com address.
- On the Sign in page, select Forgot password?. The Forgot your password? page opens.
- Enter your account email, then select Email me a reset link.
- Open the email and select the reset link. The Set a new password page opens.
- Enter a new password in New password, then enter it again in Confirm new password.
- Select Set new password.
- Return to the Sign in page and sign in with your new password.
The Set a new password form takes these fields:
| Field | Required | Default | Notes |
|---|---|---|---|
| Yes | — | The address on your account. | |
| New password | Yes | — | At least 12 characters. |
| Confirm new password | Yes | — | Must match New password. |
For your privacy, the confirmation message is the same whether or not an account exists for that email, so the page doesn't reveal which addresses are registered. If no email arrives, confirm you used the address on your account and check your spam folder.
Resetting your password doesn't bypass two-factor authentication. If 2FA is enabled, you still complete the challenge the next time you sign in.
Verify
You've signed in successfully when your dashboard loads: the admin dashboard if you're an administrator, or your personal dashboard with your assigned hardware, software, and requests otherwise.
Troubleshooting
| Symptom | What to do |
|---|---|
| Those credentials do not match our records | The email or password is wrong. Re-enter them, or use Forgot password? to set a new password. |
| Too many login attempts | Sign-in is rate-limited after several failures. Wait for the time shown, then try again. |
| This account is not active | Your account is suspended or not yet activated. Contact your administrator. |
| The two-factor code is rejected | Codes are time-based and change every 30 seconds. Set your device clock to update automatically, wait for a new code, and try again. Use a recovery code if you've lost the app. |
| Your sign-in session expired on the two-factor page | The pending challenge timed out. Go back to the Sign in page and start again. |
| An expected SSO button is missing, or sign-in is refused | The provider may not be connected, or your account uses a domain the workspace doesn't allow. Use password sign-in if available, then contact your administrator. |
| You can't find your workspace URL | Check your welcome email and bookmarks, or ask your administrator. There's no central email lookup to recover it. |