People

What is a TDACorp account?#

One account that every TDACorp product recognises, so you sign in once instead of making a new login for each product. See What is identity and Your account.

Do I need a password?#

Yes. Every account has a password, which you choose when you create it. You can add a passkey, which signs you in with your fingerprint, face or device lock, and use an emailed sign-in link or code or an external provider where one is offered. A passkey is the stronger way in, but it does not replace the password. See Signing in.

Why is there no Create an account button?#

The page offers Create an account only while sign-up is open. Where it is closed, the registration page says Registration is closed. If someone invited you to an organization, open the link in the invitation email instead.

Why does the page not say whether my email has an account?#

On purpose. The pages answer the same way for an address that has an account and one that does not, so nobody can use them to find out who has one. A link or code is sent "if this address can sign in". See Cannot sign in.

Why was I asked to confirm a sign-in?#

You signed in from a browser or place the account did not recognise, so the sign-in waits for your confirmation, or, on an account with a passkey or an authenticator app, asks for it (and offers Continue with my password only (limited session)). The email's page shows the time, the approximate place and the browser. Choose Yes, this was me only if it was you, and only in the browser you were signing in with. See Signing in.

Why was I sent to my organization's sign-in?#

Your organization manages sign-in for your email address, so the page says Sign in with your organization and offers Continue with followed by the name of its connection. Choose Use another method if the page offers it. Single sign-on connections are behind the flag tenant_connections, which is OFF by default.

Why did my link or code stop working?#

Links and codes are short lived and work once, and an emailed link completes only in the browser that asked for it. See Link or code expired.

Can I use identity in French or Spanish?#

Identity has French and Spanish translations of the sign-in pages, your account and its emails, but each deployment switches them on separately, so you may see English only. Where they are on, a language saved in your profile decides which one you see. This documentation and the technical error text applications receive stay in English. See Languages.

How do I see where I am signed in?#

Open Devices in your account. The Sessions tab lists each browser or app with its place, Signed in, Last active and Expires times. Sign out ends one, and Sign out everywhere ends all of them. See Sessions and devices.

How long does a session last?#

By default a session ends after 12 hours with no activity, and 14 days after you signed in at the latest. An organization can set its own limits. See Token lifetimes.

What is a trusted device?#

A browser you marked as trusted, so it is not treated as new when you sign in from it. You manage them on the Trusted devices tab of Devices. See Sessions and devices.

I lost my authenticator app. What now?#

Where your organization allows it, choose Use a recovery code on the second step. Each recovery code works once. Then set up the app again under Security. See Security and passkeys.

I forgot my password.#

Select Forgot password? on the password step. For an account with a passkey or an authenticator app, a wait of at least 24 hours applies before a reset takes effect, and the owner is told by email so a recovery they did not start can be cancelled. Recovery needs you to set a new password before it can finish. If an organization manages your account, no message is sent: ask the organization's administrators.

I lost my only passkey. Can I still sign in?#

Yes, if you know your password: a correct password always signs you in. On a browser the account already uses that is all. On a new browser or place the Confirm it is you page appears and offers Continue with my password only (limited session) and Email me a code instead, and your other verified addresses are told. The sign-in is one level lower than a passkey, so some apps will still ask for the passkey and some account changes will ask you to confirm with a passkey or authenticator code first. The I lost my passkey link on that page starts recovery. See If you are locked out.

Why does a change in my account ask me to confirm again?#

Sensitive actions, such as opening the security settings or downloading a data export, need a second factor you used in the last 30 minutes. See step_up_required.

Can I change my email address?#

Yes, under Profile. Add and verify the new address, then select Make primary. Your previous primary address is sent a link to undo the change, if it was verified. See Your account.

How do I stop an application using my account?#

Open Connected apps and revoke it. Select Revoke access and confirm; the application loses the access you gave it. See Connected applications.

How do I close my account?#

Open Your data, then Close account, and follow the steps. Your account is deactivated immediately and permanently, and every session and token is revoked. Your personal data is not erased at that moment. Export your data first if you want a copy. See Export and delete your data.

Who can see my data?#

See FAQ: privacy and the privacy notice.