Account & Authentication

Account & Authentication

Overview

Octayne PSA provides a secure, multi-tenant authentication system that supports email/password login, OAuth-based social login, Single Sign-On (SSO), and multi-organization access. This guide covers every aspect of creating, accessing, and managing your Octayne account, from initial signup through advanced SSO configuration.

All authentication flows use industry-standard encryption and token-based session management. Sessions expire after a configurable period of inactivity (default: 24 hours), and refresh tokens are used to maintain continuity without requiring repeated logins.

Creating Your Account

To use Octayne PSA you must first create an account. You can be invited by an organization administrator or sign up independently.

Step-by-Step: Self-Registration

1. Navigate to the Octayne PSA login page (e.g., https://app.octayne.com).
2. Click Sign Up beneath the login form.
3. Enter your Full Name, Email Address, and choose a Password.

• Passwords must be at least 8 characters and contain at least one uppercase letter, one lowercase letter, one number, and one special character.

1. Click Create Account.
2. Check your email inbox for a verification message from no-reply@octayne.com.
3. Click the Verify Email button in the email. The link is valid for 24 hours.
4. You will be redirected to the Octayne welcome screen confirming your email is verified.

[Screenshot: Sign-up form with Full Name, Email, and Password fields]

[Screenshot: Email verification message in inbox]

Tip: If you do not see the verification email, check your spam or junk folder. You can also click Resend Verification Email on the login page.

Step-by-Step: Invited Registration

1. You will receive an invitation email from your organization administrator.
2. Click the Accept Invitation link in the email.
3. If you already have an Octayne account, you will be prompted to log in and the organization will be added to your account.
4. If you do not have an account, you will be taken to a pre-filled registration form. Complete the required fields and click Create Account.
5. Verify your email as described above (step 5 onward).

Note: Invitation links expire after 7 days. If your link has expired, ask your administrator to resend the invitation.

Logging In

Email and Password Login

1. Navigate to the Octayne PSA login page.
2. Enter your registered Email Address and Password.
3. Click Log In.
4. If your credentials are correct, you will be directed to the welcome screen or your default dashboard.

[Screenshot: Login form with Email and Password fields and Log In button]

OAuth Provider Login

Octayne supports login via third-party OAuth providers including Google, Microsoft, and GitHub.

1. On the login page, click the Continue with Google, Continue with Microsoft, or Continue with GitHub button.
2. You will be redirected to the provider's authentication page.
3. Sign in with your provider credentials and authorize Octayne PSA.
4. You will be redirected back to Octayne. If this is your first login via OAuth, an account will be created automatically using the email associated with your provider account.

Tip: If you previously created an account with email/password using the same email address, the OAuth login will link to your existing account. You will be able to log in using either method going forward.

[Screenshot: Login page showing OAuth provider buttons beneath the email/password form]

Accessing Your Organization

After logging in for the first time (or after creating a new account), you will be taken through the welcome flow.

Welcome Screen and Name Entry

1. On the Welcome screen, confirm or enter your First Name and Last Name.
2. Optionally upload a Profile Photo by clicking the avatar placeholder.
3. Click Continue.

[Screenshot: Welcome screen with name fields and profile photo upload]

Organization Selection

1. If you belong to one organization, you will be taken directly to that organization's dashboard.
2. If you belong to multiple organizations, you will see the Select Organization screen listing all available organizations.
3. Click the organization name to enter it.
4. If you have not yet been added to any organization, you will see an option to Create New Organization or wait for an invitation.

[Screenshot: Organization selection screen showing multiple organizations]

Note: Your most recently accessed organization is remembered and will be selected by default on your next login.

Password Recovery

If you forget your password, follow these steps to reset it.

Step-by-Step: Forgot Password Flow

1. On the login page, click Forgot Password? below the password field.
2. Enter the Email Address associated with your account.
3. Click Send Reset Link.
4. Check your email for a message from no-reply@octayne.com with the subject "Reset Your Password."
5. Click the Reset Password button in the email. The link is valid for 1 hour.
6. On the password reset page, enter your New Password and Confirm New Password.
7. Click Reset Password.
8. You will see a confirmation message. Click Log In to sign in with your new password.

[Screenshot: Forgot Password form with email input and Send Reset Link button]

[Screenshot: Reset Password page with new password fields]

Warning: The reset link is single-use. If you click it again after resetting your password, you will see an "Invalid or expired link" error. Request a new reset link if needed.

Tip: If you logged in via an OAuth provider and never set a password, the forgot-password flow will still work. It will create a password for your account, allowing you to log in with either method.

Single Sign-On (SSO)

If your organization has SSO enabled, you can log in using your corporate identity provider (IdP) without entering a separate Octayne password.

How SSO Works

Octayne PSA supports SAML 2.0 and OpenID Connect (OIDC) based SSO. When SSO is configured for your organization:

• The organization administrator provides Octayne with the IdP metadata URL, entity ID, and certificate.
• Octayne registers as a Service Provider (SP) with the IdP.
• Users are redirected to their corporate IdP login page when they attempt to access Octayne.

Logging In via SSO

1. Navigate to the Octayne login page.
2. Click Log in with SSO (or enter your corporate email and click Continue if domain-based SSO detection is enabled).
3. Enter your Organization Slug or Corporate Email Domain if prompted.
4. Click Continue. You will be redirected to your corporate IdP login page.
5. Authenticate with your corporate credentials (and complete MFA if required by your IdP).
6. Upon successful authentication, you will be redirected back to Octayne and logged in automatically.

[Screenshot: SSO login prompt asking for organization slug or corporate email]

Note: When SSO is enforced for an organization, email/password login is disabled for all members of that organization. Only SSO login is permitted.

SSO Provisioning

• Just-In-Time (JIT) Provisioning: If enabled, new users who authenticate via SSO for the first time are automatically added to the organization without requiring a separate invitation.
• SCIM Provisioning: For organizations using SCIM, user accounts are automatically created, updated, and deactivated based on changes in the IdP directory.

OAuth Integration

Octayne uses OAuth 2.0 for both user authentication (login via Google, Microsoft, GitHub) and for connecting external services (QuickBooks, Microsoft Outlook, Google Calendar).

How OAuth Callbacks Work

1. When you initiate an OAuth connection (e.g., connecting to QuickBooks from the Integrations page), Octayne redirects you to the external service's authorization page.
2. You grant Octayne the requested permissions.
3. The external service redirects you back to Octayne's callback URL with an authorization code.
4. Octayne exchanges the authorization code for access and refresh tokens, which are stored securely.
5. These tokens are used to make API calls on your behalf. Tokens are automatically refreshed when they expire.

Warning: Never share your OAuth callback URLs or tokens with anyone. If you suspect an OAuth token has been compromised, disconnect and reconnect the integration from your account settings.

Tip: If an OAuth connection fails during the callback step, ensure that pop-up blockers are disabled for the Octayne domain and that third-party cookies are allowed in your browser.

Multi-Organization Support

A single Octayne account can belong to multiple organizations. This is useful for consultants, contractors, or users who work across several teams.

Switching Between Organizations

1. Click your Profile Avatar or Organization Name in the top-left corner of the navigation sidebar.
2. In the dropdown menu, you will see a list of all organizations you belong to under Switch Organization.
3. Click the desired organization name.
4. The page will reload and display the selected organization's data, dashboards, and projects.

[Screenshot: Organization switcher dropdown in the sidebar showing multiple organizations]

Note: Your role and permissions may differ between organizations. Switching organizations may change which menu items and features are visible to you.

Managing Organization Memberships

• To leave an organization, navigate to Settings > Organizations, find the organization, and click Leave Organization.
• To join a new organization, you must receive an invitation from that organization's administrator.

Troubleshooting

Common Login Issues

Issue	Possible Cause	Solution
"Invalid email or password" error	Incorrect credentials	Double-check your email and password. Use Forgot Password? to reset if needed.
Email verification link expired	Link older than 24 hours	Go to the login page, attempt to log in, and click Resend Verification Email.
Account locked	Too many failed login attempts (5+ in 15 minutes)	Wait 30 minutes for the lockout to expire, or contact your administrator.
SSO redirect loop	IdP misconfiguration	Contact your organization administrator to verify the SSO metadata URL and certificate.
SSO "User not found" error	JIT provisioning disabled and no pre-existing account	Ask your administrator to either enable JIT provisioning or send you an invitation.
OAuth callback error	Pop-up blocker or cookie restriction	Disable pop-up blockers for Octayne and allow third-party cookies. Try again.
"Organization not found" during SSO	Incorrect organization slug	Verify the slug with your administrator. It is case-sensitive.
Two-factor authentication (MFA) prompt not appearing	MFA configured on IdP, not Octayne	MFA is handled by your identity provider during SSO. Check your IdP settings.

Email Not Received

1. Check your spam/junk folder.
2. Verify you entered the correct email address.
3. Add no-reply@octayne.com to your email safe senders list.
4. If using a corporate email, check with your IT department to ensure the domain is not blocked.
5. Wait 5 minutes and try resending. Some mail providers have delivery delays.

Browser Compatibility

Octayne PSA supports the latest versions of:

• Google Chrome
• Microsoft Edge
• Mozilla Firefox
• Apple Safari

Tip: Clear your browser cache and cookies if you experience persistent login issues after a platform update.

FAQ

Q: Can I change the email address associated with my account?

A: Yes. Navigate to Settings > Profile and update your email address. You will need to verify the new email before it takes effect.

Q: Can I use both email/password and OAuth to log in?

A: Yes. If your account is associated with an OAuth provider and you have set a password, both methods will work.

Q: What happens if my organization enables SSO after I already have an account?

A: Your existing account will be linked to your SSO identity based on your email address. You will log in via SSO going forward. If SSO is enforced, email/password login will be disabled.

Q: Can I belong to organizations that use different SSO providers?

A: Yes. Each organization configures its own SSO independently. When you switch organizations, the applicable SSO policy for that organization applies.

Q: How do I enable two-factor authentication (2FA)?

A: Octayne supports 2FA for email/password logins. Navigate to Settings > Security > Two-Factor Authentication and follow the setup wizard using an authenticator app.

Q: Is there a session timeout?

A: Yes. Sessions expire after 24 hours of inactivity by default. Your administrator can configure a different timeout period in organization settings.

Q: Can I delete my account?

A: Yes. Navigate to Settings > Profile > Delete Account. This action is irreversible. You must first leave or transfer ownership of all organizations you own.