The personal workspace

Signing up creates the account and nothing else. It does not put you in a shared organization.

The sign-up page is titled Create your account. The address must be verified and the account must have a password; a passkey is optional. At that moment the account is given a default username taken from the part of the verified address before the @, which you can change in your profile.

The workspace is created later, by you, the first time an app needs an organization to sign you in to and you belong to none. Sign-in stops at Create your workspace, which says that the app needs a workspace and that you do not have one yet, and that yours starts with you as its only member. Select Create my workspace. Each person has at most one, and a double submit still makes one.

You are its owner. The workspace gets a random name, you are given the administrator role for it, and the apps the platform installs by default are installed in it. An account managed by an employer's organization has no workspace of its own.

A personal workspace takes no invitations: only its owner can be a member.

Self-service sign-up is not open everywhere. Where it is closed:

• there is no Create an account link on the sign-in page, and
• the sign-up page says Registration is closed and New accounts cannot be created here right now.

Where sign-up is open it can still be limited for a while. The page then says Sign-up is temporarily limited and to try again later.

If someone invited you to an organization, you do not need sign-up at all. The page says If someone invited you to an organization, open the link in your invitation email. See Memberships and invitations.

The personal workspace is where things that belong to you alone are kept, rather than to an employer or a customer. Today that means one feature, and it is available where your organization allows it:

• Developer apps. In your account, under Apps and access, a person can register a small number of apps of their own. The rules are fixed. Apps are public clients, so they hold no client secret, sign-in uses PKCE, and DPoP is required. Only the openid, profile and email scopes are available, redirect URIs must be exact https addresses, and each app can have up to 5 of them by default. By default you can register up to 5 apps, and suspended ones count towards that limit. Both numbers can be set differently by the platform operator, between 1 and 20 apps and 1 and 10 redirect URIs.

Registering an app needs a personal workspace. An account that has none gets the message Registering an app needs a personal workspace, and this account has none. That is the case for an account that joined only through invitations, or that has not yet created one. Where the feature is not available, the page says App registration is not turned on.

• It is not a private copy of your data. It is an organization like any other.
• It does not change how you sign in. Your account, passkeys and sessions are the same everywhere you belong.
• It is not required. An account created by invitation has its own memberships and no personal workspace unless it also signed up.

The owner can turn the workspace into a customer organization, in place. On the Organizations page of your account, select Upgrade to an organization. The dialog Upgrade your personal workspace? says Keeps your workspace, its apps and settings. Lets you invite people and manage members from the admin console. This cannot be undone here. Confirm with Upgrade workspace. The request needs a recently confirmed second factor.

Only the owner can do it, and an organization cannot be turned back into a personal workspace. The apps you registered stay with it.

You cannot leave the personal workspace. It is your home on the platform, so leaving would be a one-way loss. The Memberships page shows This is your personal organization with the note It is your home on the platform and cannot be left. and offers no Leave button.

• Organizations
• Principals and accounts
• Signing in