Skip to content
TDACorpIDENTITYSign in

Start with your email or username

The first sign-in screen, where you say who you are, and the methods it can offer next to the form.

On this page

Every sign-in begins on one page, Sign in to TDACorp, with the line Use your TDACorp account. You reach it by opening the sign-in page directly, or because an application sent you there. The page is the same either way, and the address stays the same as the sign-in moves from step to step: each step replaces the one before it on the page.

The sign-in page: an email field, a Continue button, and below them the options to sign in with a passkey or to be emailed a sign-in link.
  1. The email field, labelled Email on the current public sign-in page. Where the organization accepts a username as well, the field is labelled Email or username.
  2. Continue, which sends what you typed and moves to the next step.
  3. Sign in with a passkey, which skips typing and uses a passkey on your device.
The sign-in page. You type who you are first; the next step depends on what the account has./sign-in

What the page asks#

You type who you are and select Continue. Nothing else is asked on this screen. What comes next depends on the sign-in methods your organization allows: for example a password, a passkey, or an emailed link. The page does not tell you whether an account exists for what you typed, so a mistyped address and a correct one look the same at this point. If the next screens do not fit what you expect, use Use a different email to go back and start again.

What else can be on the page#

The page only shows the methods available to you. Below the form, after a line reading or, it can offer:

ControlWhat it doesWhere to read more
Sign in with a passkeySigns you in with your device lock, with nothing to type.Sign in with a passkey
Email me a sign-in linkSends you a message with a link and a code.Sign in with an emailed link or code
Google or GitHubSigns you in with that provider.Sign in with an external provider

Where it is offered, a box reads Keep me signed in on this device, with the hint Only on a device you control. Tick it only on a device that you control and that nobody else uses. It applies to the sign-in you start with Continue.

When sign-up is open, the footer of the page reads New here? with the link Create an account. When it is closed, there is no such link. See When sign-up is closed or limited.

One moment#

Sometimes the page pauses on a screen titled One moment, which says We are checking that this request comes from a person. and Checking your browser. This can take a few seconds. Wait; the sign-in carries on by itself. If it cannot finish, the screen says The check did not finish. Try again. and offers Try again.

When your organization requires single sign-on#

If the domain of the address you typed belongs to an organization that requires single sign-on, the page does not ask for a password. It shows Sign in with your organization and says that the organization manages sign-in for your email address. Select Continue with and the organization's name, and you go to the organization's own identity provider to sign in. When you come back, the sign-in carries on from the sign-in page.

Which screen you get depends only on the domain of what you typed, so an address that has an account and one that has none see the same thing. Use another method goes on to the ordinary screens, but the organization's requirement is still checked when you enter it, so another method does not get you in. If an application sends you to such an organization and you did not sign in through it, the sign-in ends with a message that the organization requires single sign-on.

This is available only where the platform has turned on the tenant_connections flag, and the requirement itself needs the sso_enforcement flag. Both default to OFF. The screen appears only when exactly one active connection is linked to the typed domain.

If you are already signed in#

Opening the sign-in page directly while you already have a session on this browser takes you to your account instead of showing the form. To sign in as someone else, sign out first.

When an application sends you here and you are already signed in, but it only needs your consent or a fresh confirmation, the page does not ask for your email again. It continues from your session to Allow access or Confirm it is you.

A session that began through an organization's single sign-on connection is used only for the organization that connection is linked to. For any other organization the application asks for, the page shows the sign-in again instead of reusing it.

If something goes wrong#

  • Those details did not work. Check them and try again. Check what you typed. The message never says which part was wrong.
  • Too many attempts. Wait a little and try again. A request was refused for coming too often. Where the page knows how long to wait it says Too many attempts. Try again in a length of time, for example 5 minutes.
  • A message that names a cause, for example about the email limits, ends with a link, Why does this happen?, and a Reference: code to quote when you ask for help; see Sign-in errors and what they mean. A notice above the form, such as You cancelled the sign-in with that provider., comes from an external provider sign-in that did not finish. See Sign-in errors and what they mean.

Verified against commit 4fd66ff