Authentication & Access

Objective

Explain how to enter the portal: sign in, create a workspace, sign in with Google, verify your email, accept team invitations, and recover your password.

Access

Authentication pages are public (no session required). Routes:

• /login — sign in
• /signup?plan={plan} — create a workspace (reached from /pricing)
• /auth/complete?plan={plan} — finish a Google sign-up
• /auth/verified — email confirmed
• /auth/verify-failed?reason={reason} — verification link expired or invalid
• /forgot-password — request a reset link
• /reset-password — set a new password
• /invite/{token} — accept a team invitation

After a successful sign-in you land on your workspace dashboard at /app/{tenant}/dashboard.

Roles

• Self-service sign up creates the workspace owner.
• Team invitations assign one role: admin, agent, or viewer (chosen by the person who invites you).
• owner and admin can manage the workspace; agent and viewer have limited access.

Sign in

Go to /login and choose one option:

• Continue with Google — sign in with your Google account. Google's account chooser always appears so you pick the account deliberately.
• Email + Password — fill in the fields and press Sign in.

Fields:

Notes:

• Use Forgot password? to start a reset.
• Create account takes you to /pricing to pick a plan first.
• Sign-in attempts are rate limited (up to 10 per 15 minutes). If you hit the limit, wait a few minutes and try again.

Already signed in

If you open /login while you still have an active session, the page does not silently reuse it. It shows You are already signed in with your email and two choices:

• Continue as {name} — keep the current session and go to your dashboard.
• Use another account — sign out of this browser and show the sign-in form.

Create an account (sign up)

Sign up always starts from a selected plan. If you open /signup without a plan, you see Choose a plan to continue and a View plans button that sends you to /pricing.

Steps:

1. Go to /pricing and choose a plan.
2. You are taken to /signup?plan={plan}.
3. Either press Continue with Google (finishes on /auth/complete) or complete the form and press Create account.

Fields:

Workspace URL rules:

• Lowercase letters, numbers and hyphens only.
• Between 3 and 63 characters; cannot start or end with a hyphen.
• Some names are reserved (for example www, api, admin, support) and cannot be used.
• Availability is checked as you type; you see available, already taken, or checking.

After you submit:

• Free plan: your workspace opens immediately at /app/{tenant}/dashboard.
• Paid plan: you continue to a secure Stripe checkout with a 14-day free trial.
• Free workspaces bring your own OpenAI key (BYOK); managed AI credits are a paid benefit.
• A confirmation email is sent so you can verify your address (see Email verification).
• Enterprise plans are sales-assisted and cannot be created here.

Complete your account (Google)

If you sign in with Google and do not have a workspace yet, you are sent to /auth/complete to finish setup. A plan must be selected; otherwise you are redirected to /pricing.

Fields:

Press Finish setup. Free plans open the dashboard; paid plans continue to checkout. Accounts created with Google are email-verified automatically.

Email verification

New email/password accounts receive a confirmation email from Helios Vision AI. The link is valid for 72 hours.

1. Open the confirmation email.
2. Click Confirm Account.
3. You land on /auth/verified. If you are signed in, continue to your dashboard; otherwise sign in.

Notes:

• Some actions stay restricted until you verify (for example, inviting team members).
• Google sign-ups are already verified and skip this step.
• If the link is expired or invalid, you are sent to /auth/verify-failed, where you can enter your email to receive a new link. For your privacy, the same confirmation is shown whether or not an account exists, and a new link cannot be requested more than once per minute.

Team invitations

Invitations are created by a workspace owner or admin and are valid for 7 days.

1. Open the invitation link /invite/{token}.
2. Review the workspace name, the role you will receive, and your invited email (which is fixed).
3. Complete the form and press Accept Invitation and Create Account.
4. Your account is created with the assigned role and your workspace dashboard opens.

Fields:

Note: if the invitation has expired, the page shows Invitation expired. Ask the workspace administrator for a new one.

Reset a forgotten password

1. Go to /forgot-password.
2. Enter your Email and press Send reset link.
3. For your privacy, the page confirms that a link was sent if an account exists.
4. Open the email and follow the link to /reset-password.
5. Set the new password and press Update password. You are returned to /login.

Reset fields:

Sign out

Use the user menu in the sidebar and choose Sign out. You are returned to /login.

Good practices

• Pick a short, memorable Workspace URL — it becomes your workspace address and cannot collide with another workspace.
• Use a strong password: at least 8 characters, mixing uppercase, lowercase and numbers.
• Verify your email soon after signing up to unlock all actions.
• On a shared computer, use Use another account or Sign out to avoid staying signed in.

Common errors