Sign in
This page explains how accounts and sign-in work, and how to manage your sessions. When you open the dashboard, you see one button for each sign-in method that your platform offers.
Sign-in methods
Which of these you see depends on how your platform is configured.
| Method | Notes |
|---|---|
| Identity provider | GitLab, GitHub, Google, or any OpenID Connect provider such as Okta, Entra or Keycloak |
| Username and password | Available only when the platform has local sign-in switched on |
Your account is created the first time you sign in successfully, or by an administrator. There is nothing to register for separately.
If you sign in through an identity provider, that provider owns your name, avatar and email. Change them there and they follow through to your profile.
Signing in with a username and password
When your platform offers it, the sign-in page has a Username or email box and a Password box under the provider buttons. A wrong username and a wrong password give the same answer, Invalid credentials., so nobody can use the form to find out which accounts exist. After several wrong attempts, further attempts are refused for a while.
If sign-in fails
The sign-in page tells you why and offers the button again.
| Message | What it means | What to do |
|---|---|---|
| The sign-in request could not be verified (invalid state). | The sign-in took too long, or was started in another tab | Select the sign-in button again |
| Sign-in was refused: … | You canceled at the provider, or the provider said no | Try again and approve the request |
| Could not complete sign-in (token exchange failed). | The provider did not finish the handoff | Try again; if it keeps happening, tell your administrator |
| Your … account needs a verified email address. | Your provider account has no verified email | Verify your email with the provider, then sign in again |
| Your … account is not permitted to sign in here. | This platform admits only some accounts | Ask an administrator for access |
| Sign-in is not configured for … | The platform has no sign-in method set up for this address | Tell your administrator |
| Sorry, you are not on the registered list. Please contact the admin. | This platform admits only registered people | Ask an administrator to add you |
Signing out
- On any page: avatar menu → Logout.
- On the home launcher: the gear → Sign out.
Signing out ends your session here. It does not sign you out of GitLab, Google or your other provider, so the next time you select the sign-in button you may be signed straight back in without being asked for a password. On a shared computer, also sign out at the provider. (Some platforms that use single sign-on are set up to sign you out of the provider too.)
Your sessions
Open Account Settings → Security to see where you are signed in.
- Active sessions, each with a device label and how old it is. Your current one is marked This device.
- Your recent sign-ins.
- Log out on any other session, or Log out everywhere else.
You cannot revoke the session you are currently using — sign out normally for that.
Use Log out everywhere else, then change your password with your identity provider. Ending the session does not change the credential that created it.
Re-authentication
If you signed in a while ago, some sensitive actions ask you to confirm that it is still you. You go through the same sign-in flow again, and then return to what you were doing.
Today the only such action is an administrator viewing the dashboard as another user, which needs a sign-in within the last 15 minutes.
Next steps
- Sign-in and sessions — how your account is protected
- Deploy your first lab
- Connect your device