Sign in, join an organization, and protect your account
Create or accept an account, complete MFA, add a tested backup authenticator, and recover access when a password or device is lost.
Before you start
- Use your organization’s Rapport console address and your work email.
- Have a TOTP authenticator app or a supported device/security key ready. An existing enrolled method is required to add a backup.
Screenshots show the Rapport interface with example data. Use your organization’s devices and values. Select an image to view it at full size.
Create an account or follow your invitation
For a new organization, choose Sign up and enter Your name, Organization name, Work email, and a Password of at least eight characters, then choose Create account. Follow the confirmation instructions shown after signup. When email confirmation is required, check your inbox and spam folder; Resend confirmation lets you request another message after a minute. If a colleague invited you, open that invitation and choose Sign in or Create account; the invitation signup joins the inviting organization and does not ask you to create another one. If you already have an account but no organization, sign in, complete MFA, and use the Organization name form on No organization yet. Retrying an uncertain creation returns the same organization.
What you should see: The invitation page shows Joined organization after acceptance; choose Continue to open the console.
Choose your sign-in method
Enter Email and Password and choose Sign in. To use an email link, enter your email first and choose Send magic link, then open the email. Continue with SSO appears only when your deployment has an SSO provider configured. These methods identify your account; you still complete the second-factor step before entering protected pages.
Set up or verify MFA
At the first MFA screen, choose Set up authenticator, scan the displayed QR code with a TOTP-compatible app, and enter the Six-digit authentication code. A supported browser may also offer Set up device or security key. On later sign-ins, use an enrolled device or select an Authenticator app and enter its current code. Do not enroll a replacement merely because a code expired; enter the next code from your existing method.
What you should see: Successful verification returns you to the requested console page.
Check your authenticators
Open Account security. Under Your authenticators, distinguish Verified authenticator app or Verified device or security key from Setup incomplete. Choose Test beside a verified method and complete the challenge. A successful test confirms you can use it now; it remains enrolled. Use Reload authenticators after an interrupted setup to check what actually completed.
Add a backup on a separate device
Enter an Authenticator name, such as Backup phone, then choose Add authenticator app or Add device or security key. Verify using an existing authenticator first. For an app, scan the new QR code on your backup device, enter Code from the backup authenticator, and choose Verify backup authenticator. Keep the setup key private. Stop setup stops the current flow but may leave an unusable incomplete registration.
What you should see: The backup appears as verified and becomes available at sign-in and for sensitive actions.
Revoke other sessions after losing a signed-in device
Under Other signed-in sessions, choose Sign out other sessions and verify an existing authenticator. This keeps the current session signed in and revokes the ability of other sessions to refresh. Already-issued access tokens can remain usable until expiry. The action applies across your organizations and leaves your authenticators enrolled; it does not remove a lost security key.
Reset a forgotten password
On the sign-in form, choose Forgot?, enter your email, and request the reset link. Open the email and complete Verify authenticator if prompted. Enter a New password with at least eight characters and choose Update password. Sign in again with the new password and MFA. If the result says session revocation was not confirmed, contact support to check the remaining sessions.
Use the recovery route when every authenticator is unavailable
Try another enrolled method before requesting recovery. If all methods are lost, contact your organization’s administrator through its established support channel for identity verification. Password reset does not replace MFA. Remove authenticator is currently unavailable in this console; report a lost or compromised authenticator to your administrator and retain your remaining working method.
If something doesn’t work
A verification code is rejected or expired.
Use a fresh six-digit code from the selected authenticator. If the result of setup was uncertain, use Reload authenticators before starting another enrollment.
The invitation does not join the expected organization.
Check that you signed in with the invited email and opened the original invitation. Ask the inviting administrator to inspect Pending invitations and resend or replace an expired invite.
A device or security key is not offered.
Use a browser that supports the enrolled device/security-key method, or select an enrolled TOTP app. Missing browser support does not mean the factor has been removed.