End-User Console Access
Setting your password
When an administrator adds you to AuthNull, you receive an email titled Set up your Authnull account. To finish setting up your account:
- Click Set your password in the email.
- On the Choose your password page, enter and confirm your password.
- Click Set password. You are taken to the sign-in page.
The invitation link works once and expires in 7 days. If it has expired, ask your administrator to send a new invitation. You cannot sign in until you have set a password.
Signing in to the end user console
- Go to
/ssc/signinon your organisation's AuthNull address. - Enter your Username and Password and click Sign in. If your organisation uses single sign-on, you can choose Continue with your provider instead.
- Complete the second factor. Choose one of the methods your organisation has enabled:
- TOTP - the first time, scan the QR code with an authenticator app and enter the six-digit code it shows. Save the recovery codes somewhere safe. After that, enter the current code from the app.
- Passkey - the first time, click Register passkey. After that, click Login with passkey and use your device's biometric or security key.
- Push to your phone - approve the request on your phone, in Duo Mobile or Okta Verify, depending on your organization's MFA provider.
The first time you sign in, the page says Configure MFA. and you set up your first method. After that it says Prove it's you.
Passkeys need your organization's AuthNull console to run on a domain; on an IP-address-only installation, use an authenticator app code or push.
Forgot your password?
On the sign-in page, enter your username and click Forgot password?. A password reset link is sent to your email. Open it, enter a new password on the Set a new password page and click Update password.
If sign-in says Password not set for this user, you have not completed your invitation yet. Use Forgot password? to set your password.
Push MFA for infrastructure sign-ins
Signing in to Windows, VPN, database, or server resources uses push MFA through your organization's MFA provider, not the end-user console. See Authenticating with Push MFA.