Signing in, two-step verification and your account
Passwords, emailed sign-in links, Google and Microsoft 365, authenticator codes, invitations and changing your email address.
Summary
Your organization chooses how people sign in: with a password, with a link emailed to you, with its Google Workspace or Microsoft 365 directory, or a mix. The sign-in page shows only the ways your organization allows. Two-step verification adds a code from an authenticator app to every sign-in; your organization may require it.
Why it's needed
Training records are evidence. Each way of signing in proves you control your email address or your company account, and two-step verification protects an account even if a password leaks.
Key terms
- Sign-in link: a one-time link emailed to you, valid for 15 minutes.
- Single sign-on (SSO): signing in with your company's Google or Microsoft 365 account.
- Two-step verification: a 6-digit code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password and others) at every sign-in.
- Backup codes: ten single-use codes for when you cannot use your app. They are shown once.
How it works
- Invitation: your organization emails you an invitation. Open it, choose a password (or your company account), read and accept the terms, and you are in. The link works once and expires after seven days.
- Password: set or reset it with a code emailed to you, from the sign-in page.
- Sign-in link: enter your email and choose "Email me a sign-in link". Every link replaces the previous one.
- Google or Microsoft 365: choose the button and sign in with your company account. Your organization may limit this to its own email domains.
- Two-step verification: turn it on under Account security: scan the QR code with your app, enter the code it shows, and save your backup codes. If your organization requires it, you have a grace period (shown on every page) and then you set it up at your next sign-in. Organization administrators must use it by default.
- Changing your email address: under Account security. We send a confirmation link to the new address; nothing changes until you open it. Then your previous address gets a link to undo the change for seven days, and every session is signed out.
- Sessions: Account security lists where you are signed in. Sign any of them out, or all of them.
Role-based access
| Who | Can |
|---|---|
| You | Sign in the ways your organization allows; manage your two-step verification, sessions and email address |
| Org Admins | Choose the sign-in methods and when two-step verification is required (Settings); set up Google and Microsoft 365 (Single sign-on); invite people (Invites); clear someone's two-step verification if they lose their phone |
| Assigners | Invite people as Learners |
How it connects
The first time you sign in, you are asked to accept the Terms of Service and the Privacy Policy. Your verified email address is identity level L1; see How identity verification works.
Tips
- Keep your backup codes somewhere safe, away from your phone.
- A sign-in link opens on the device you click it on; ask for a new one on another device rather than forwarding it.
Troubleshooting
- "This way of signing in is turned off for your organization." Use another method shown on the sign-in page.
- "That code is not right." Check the time on your phone is set automatically; each code works once.
- "Too many codes tried." Wait five minutes.
- Lost your phone and your backup codes. Ask your organization's administrator to reset your two-step verification.
- "There is no account for that address here." Ask your organization for an invitation.