Skip to content

Sign in

The console offers two ways to sign in. WorkOS AuthKit is the primary option and the one you should use for everyday access. A one-time email code is available as a fallback for accounts that haven’t moved to AuthKit yet.

WorkOS AuthKit is the recommended sign-in method. It supports single sign-on, multi-factor authentication, and any identity provider your organization has connected to WorkOS.

  1. Open the sign-in page

    Go to the console and select Continue with WorkOS. This is the primary button at the top of the sign-in form.

  2. Authenticate with your identity provider

    WorkOS redirects you to your organization’s identity provider. Complete sign-in there (password, passkey, SSO, or MFA challenge—whatever your admin has configured).

  3. Return to the console

    After authentication, you land on /auth/workos/callback. The page hydrates your session and forwards you to your dashboard. The auth fragment is stripped from the URL so it doesn’t appear in browser history.

Email codes are kept as a fallback for accounts that haven’t migrated to WorkOS yet, or when AuthKit is temporarily unreachable.

  1. Choose the email option

    On the sign-in page, select or use email code below the WorkOS button.

  2. Request a code

    Enter your email and select Send code. You’ll receive a six-digit code that’s valid for a short window.

  3. Verify

    Enter the code to complete sign-in. Codes can be requested up to 10 times per minute per email address.

Select your avatar in the top-right and choose Sign out. The console clears your local session and notifies the auth provider so refresh tokens are invalidated.

SymptomLikely cause
Continue with WorkOS button is disabled or missingWorkOS isn’t configured for this environment. Contact your admin to set the WorkOS credentials.
Redirected back to sign-in immediately after WorkOS callbackThe callback URL doesn’t match what’s registered in WorkOS. Verify the redirect URI in your WorkOS dashboard.
Email code never arrivesCheck spam, then verify the email is on a confirmed account. Rate limits apply—wait one minute between requests.