Skip to main content
The Authentication page decides how people get an account on your OASM instance. By default only admins create accounts. You can also open public sign-up: anyone can then register from the login page, confirm their email address, and wait for an admin to approve the account. The page lives in the console’s Admin area under System → Authentication (/admin/authentication).
Available from v0.10.0. Only users with the platform Admin role can change it — see Users and roles.

Open public sign-up

1

Set up the mail server

New accounts confirm their email address, so sign-up stays closed until a mail server is configured and turned on. Follow Mail server and send a test email first.
2

Turn on public sign-up

Open the user menu, choose Admin, then Authentication under System, and switch on Allow public sign-up. The change applies at once — there is no save button.
While the mail server is off, the page says so: “Sign-up stays closed until the mail server is on”, with a link to the Mail server page. Turning the switch off closes sign-up immediately. Accounts that already signed up keep their state.

What a new user goes through

1

Sign up

The login page shows Don’t have an account? Sign up while sign-up is open. The Create an account form asks for a name, an email address, and a password of 8 to 128 characters.
2

Confirm the email address

After Create account, the user is sent back to the login page and receives an email with a verification link, valid for 24 hours. Opening it returns them to the login page with “Email confirmed”.
3

Wait for approval

The account stays inactive until an admin approves it — see Approve a new account. After approval, the user signs in normally.
A sign-up never signs anyone in, and the form answers the same way whether or not the email is already registered, so it cannot be used to find out who has an account.
When sign-up is closed, the Sign up link is hidden and /signup shows “Sign-up is turned off” instead of the form. The API refuses sign-ups as well, so closing it cannot be bypassed. While sign-up is open, a person invited to a workspace who has no account can sign up from the invitation; their first sign-in after approval returns them to it. While it is closed, an admin creates their account instead.

Messages on the login page

Troubleshooting

Send a test email from the Mail server page. If it arrives, check the user’s spam folder; the user can request a new link from the login page. If it fails, the error shown there names the problem.

Mail server

Configure the SMTP server that sends verification emails

Users and roles

Approve new accounts and manage existing ones