Signing in and securing your account

Go to your provider’s Vigilis sign-in page to get in. Which sign-in methods you see depends on what your organization has turned on, so your page may show some of the options below and not others.

Ways to sign in

• Email and password. Enter the email your invite went to and your password.
• Magic link. Enter your email and Vigilis sends you a one-time sign-in link, so you don’t need to type a password.
• Google or Microsoft. If your organization allows it, sign in with your existing Google or Microsoft account.
• Single sign-on (SSO). Sign in through your company’s own identity provider (SAML or OIDC). An organization admin sets this up themselves; see below.

At least one sign-in method is always available. If the option you expect is missing, an admin at your organization can enable it, or your provider can help.

Setting up single sign-on (for admins)

If you are an organization admin, you can connect Vigilis to your own identity provider. On the Authentication tab in organization settings, you can add and edit your own SAML or OIDC SSO provider and then turn SSO on. You do not need your provider to configure it for you. The same tab has a “Require SSO only” option if you want everyone to sign in that way.

Forgot or need to reset your password

Use the Forgot password link on the sign-in page. You’ll receive an email with a link to set a new password.

If you don’t receive the email within a few minutes, check your spam folder, then contact your provider. They can verify the email address on file and re-send it or replace your account’s contact address.

Note that changing your password signs you out of all your other sessions.

Add a second factor: 2FA and passkeys

Beyond your password, you can protect your account with two-factor authentication (2FA) or a passkey, both set up from your profile.

• Two-factor authentication (2FA) adds a second step after your password: a rotating code from an authenticator app, or a passkey. When it’s on, you’ll confirm that second factor each time you sign in, and you’ll get one-time backup codes to store somewhere safe.
• Passkeys let you sign in with a fingerprint, face, security key, or trusted device instead of typing a password.

For the step-by-step on enabling 2FA at the enrollment page, choosing between an authenticator app and a passkey, managing backup codes, and adding passkeys, see Two-factor authentication and passkeys.

If your organization requires 2FA, you won’t be able to turn it off. If your organization signs you in only with SSO, a social account, or a passkey (so your account has no password), there may be nothing to manage here, and the profile will tell you so.

If you’re locked out

Repeated failed 2FA attempts will temporarily lock that verification method as a security measure. Wait a few minutes and try again, or use one of your backup codes.

If you’re fully locked out of your account (you’ve lost your password, your authenticator, and your passkey), don’t create a new account. Contact your provider so they can help you regain access to your existing one. Creating a second account under your email won’t work, since sign-up is invite-only.