Create the first administrator

This suite has no accounts yet. The account you create now will be protected by a password and a two-factor authenticator app.

At least 12 characters, with upper case, lower case and a digit.

Sign in

Step 1 of 2 — enter your credentials.

Sign in with single sign-on

or with a username and password

Your network (directory) username and password work here too.

← Back to the suite

Two-factor verification

Step 2 of 2 — enter the 6-digit code from your authenticator app.

Each recovery code works once. Regenerate them afterwards.

Set up two-factor authentication

Two-factor authentication is required before you can add, edit or delete anything.

Scan this QR code with Google Authenticator, Microsoft Authenticator, 1Password, Authy or any TOTP app.

Two-factor setup QR code

Can't scan? Enter this key manually:

Save your recovery codes

Store these somewhere safe. They are the only way in if you lose your authenticator device, and they are shown only once.

    🔐 Suite administration View suite ↗ Help

    Applications & websites

    Drag the handle to reorder how entries appear in the suite.

    Name URL Category Visibility Actions
    📭

    No applications yet.

    Add your first entry to see it in the suite.

    Administrators & users

    Administrators manage the suite. Users can sign in to see private links and manage only their own account. Password accounts enrol a second factor at first sign-in; LDAP and SSO accounts follow the rules under “Single sign-on”.

    Username Display name Role Sign-in 2FA Status Last sign-in Actions

    No accounts with that role.

    Suite appearance

    Shown in the header of the public suite page.

    Single sign-on

    Let people sign in with their organisation account instead of a password kept by the suite. Accounts with a suite password keep working either way: keep at least one of them as an administrator, as a way in when the directory or identity provider is unavailable.

    SAML 2.0

    Microsoft Entra ID, Okta, ADFS, Google Workspace, Keycloak, or any SAML 2.0 identity provider.

    1. Give these values to your identity provider

    The address people use to reach the suite. The values below are built from it.

    Only change this if your identity provider needs a particular value.

    Step-by-step: Microsoft Entra ID
    1. In the Microsoft Entra admin center open Enterprise applications → New application → Create your own application, choose “Integrate any other application you don’t find in the gallery”.
    2. Open Single sign-on → SAML. Under Basic SAML Configuration set Identifier (Entity ID) and Reply URL to the values above, and Sign on URL to the sign-on URL above.
    3. Under SAML Certificates download Federation Metadata XML and import it in step 2 below.
    4. To manage roles from Entra, open Attributes & Claims → Add a group claim and choose “Security groups” (or “Groups assigned to the application”). Entra sends each group’s Object ID: paste the IDs into the group boxes in step 3.
    5. Under Users and groups, assign the people or groups who may use the suite.

    2. Enter your identity provider’s details

    Fills in the three fields below. Nothing is saved until you press Save.

    When set, responses from any other issuer are refused. Recommended.

    Base64 or PEM. Paste several to cover a certificate rollover.

      3. Accounts and roles

      Members become Administrators.

      If set, only members of these (or the administrator groups) may sign in.

      With either group box filled in, roles follow the groups at every sign-in. With both empty, new accounts are Users and you set roles on the Administrators tab.

      Attribute names

      For Entra app roles use http://schemas.microsoft.com/ws/2008/06/identity/claims/role

      LDAP / Active Directory

      People type their directory username and password on the normal sign-in form.

      This connection is not encrypted: passwords would cross the network in clear text. Use an ldaps:// address or turn on StartTLS.

      Connection

      Custom certificate authority

      A read-only account used to look people up. Blank: search anonymously.

      Stored on the server and never shown again.

      {{username}} is replaced by what the person typed, safely escaped. Must match exactly one entry.

      Attribute names

      uid for OpenLDAP.

      Accounts and roles

      Full DN or just the group name, one per line.

      If set, only members of these (or the administrator groups) may sign in.

      Test the connection

      Uses the values in this form, saved or not. Leave the username blank to test only the connection and bind account.

      You are signed in

      Your account has the User role. Private links are now listed on the suite page alongside the public ones. Ask an administrator if you need to manage the suite.

      Organisation sign-in

      Change password

      Changing your password signs you out of every other device.

      Two-factor authentication

      You will be signed out and asked to enrol a new device at the next sign-in.

      Activity log

      Sign-ins, two-factor events and every change made to the suite.

      WhenUserActionTargetDetailIP

      Add application

      http:// and https:// links, or a path beginning with “/”.

      No icon — the name's initials will be shown.

      Comma separated.

      Visibility

      Add user

      At least 12 characters with upper case, lower case and a digit. They will enrol their own authenticator at first sign-in.

      Documents & sharing

      Documents

      Every signed-in user and administrator can open and download these from the suite page. People you share the application with can open them too.

        Share by email

        Sends a link to someone without an account. No username or password is needed, and the link stops working when the access period ends. It shows this application's details and documents. The application's own site keeps its own sign-in.

        Your local time. Between 15 minutes and 90 days from now.

        Share links

          This application has not been shared yet.

          Reset password

          At least 12 characters with upper case, lower case and a digit. The account is signed out everywhere.

          Choose an icon

          ⌕

          SVG is not accepted — it can carry script, and these files are served from this origin.

          Your uploaded icons

          Brand logos from Simple Icons (CC0) · symbols from Lucide (ISC). Logos are trademarks of their owners.

          New recovery codes

          Your previous codes no longer work. Save these now — they are shown only once.