# Sign in: password, sign-in link, company account

After this guide, you are in the portal of your organization. Your email address decides which ways are open to you, and you do not need to set anything up for that.

> **Type:** guide
> **For:** everyone with an account, whether from registration, an invitation, or a company account
> **Prerequisite:** your email address and access to your mailbox. You never need an organization code.
> **Where in the portal:** the sign-in page of your organization

## Steps

1. Under **Sign in**, enter your **Email** and click **Continue**.
2. **Welcome back** asks **How would you like to sign in?** and shows exactly the ways set up for your address, usually **Password** and **Sign in**. If you made a typo, **Change** takes you back.
3. If two-factor sign-in is on, **Confirmation code** follows: six digits from your authenticator app, then **Confirm**. Without the app, click **Use a recovery code**. The format is `XXXX-XXXX-XXXX`. Neither a magic link nor a company account replaces this step.
4. If your address belongs to several organizations, **Where would you like to work?** follows. The list shows exactly the organizations for which your proof of identity holds, whether you provided it with a password, a magic link, or a company account. One click signs you in there.

## Options

**Magic link.** Below the **or** line is **Email me a sign-in link**. The answer is always **Check your inbox**, even if no account exists for the address. In the email, **Sign in now** leads into the portal. The link is valid for 15 minutes and only once. If your mail program rewrites links, use the code below it: **If the link does not work** › **Paste the code from the email** › **Sign in with code**.

**Company account.** If your domain belongs to a configured sign-in path, **Your organization uses single sign-on.** appears with **Sign in with company account**. Clicking it takes you to your provider. You return through **Completing sign-in**. If your organization enforces this path, only this button is shown. Otherwise, password and magic link remain available. A person with the **Owner** role sets up the path under **Settings › Organization › Company sign-in**. See [Set up company sign-in (SSO)](/docs/organization/set-up-company-sign-in).

**Continue with Google** and **Continue with Apple** connect an account with the same confirmed address automatically the first time. See [Connected accounts and active sessions](/docs/organization/connected-accounts).

**Accepting an invitation.** The link in the invitation email leads to **Accept invitation**: Enter a **Display name** and a **Password (min. 12 characters)**, then click **Create account and sign in**.

**Forgotten password.** Select **Forgot your password?** on the sign-in page, enter your address, and click **Request link**. Check your spam folder as well.

## Check the result

You land on the **Dashboard**. The user menu in the header shows your address and leads to **Sign out**. As the break-glass account of an organization with an enforced company account, you may sign in with a password for 24 hours after setting the password. After that, only the company account applies again.

## If something goes wrong

| Symptom | Meaning | Solution |
|---|---|---|
| “Email or password is incorrect.” | The address or the password is wrong. | Enter them again. If that does not help, select **Forgot your password?**. |
| “Too many attempts — …” | Too many failed attempts in a short time. | Wait a moment. |
| “This account is suspended. …” | The account is suspended. Active sessions end immediately. | Your organization lifts the suspension. |
| “This organization is currently suspended.” | Access for the whole organization is on hold. | Contact the administration of your organization. |
| “This organization only allows sign-in through the company account.” | Password, magic link, and reset are turned off for your domain. | **Sign in with company account**, see [Enforcement and break-glass accounts](/docs/organization/about-sign-in-enforcement). |
| “This sign-in could not be matched. …” | The process stayed open too long or started in another window. | Start again on the sign-in page. |
| “This sign-in has expired or was already completed. …” | The handoff to the portal was already used up, for example after a reload. | Start again on the sign-in page. |
| “Your company account provider is currently unreachable. …” | A disruption at the provider. | Wait a few minutes, then try again. |
| “The sign-in was canceled or rejected by your company account provider.” | Canceled at the provider, or the account is not permitted. | Try again. If that does not help, ask the IT team of your organization. |
| “Your provider has not confirmed this email address. …” | The provider reports the address as unconfirmed. | Use a password or a magic link. |
| “This provider account already belongs to a different sign-in. …” | The account at the provider is tied to a different sign-in. | Sign in as usual. |
| “There is no account for this email address. …” | No access has been created for the address. | Ask for an invitation. |
| “This magic link is invalid, expired, or has already been used.” | The 15 minutes are up, or the link was already used. | **Request a new link**. |
| “This invitation is invalid or has expired.” | Invitations expire and can be revoked. | Ask for a new invitation. |

## Related

- [Change or reset your password](/docs/organization/password)
- [Enforcement and break-glass accounts](/docs/organization/about-sign-in-enforcement)
- [Sign-in, password, and access](/docs/help/sign-in-troubleshooting)