AltiusForms
EN
Login Start for free
  1. Documentation
  2. Instance administration
  3. Sign-in and security

Sign-in and security

Sign-in and security

Email and password

Each user signs in with their email address and password, and can reset the password themselves from the sign-in page.

Single sign-on (SSO)

AltiusForms can accept your organisation's accounts:

  • Microsoft (Entra ID) and Google (Workspace);
  • Apple and Facebook;
  • any OpenID Connect provider (Keycloak, for example), with a button label of your choice.

A button appears on the sign-in page for each configured provider. Setup is done at instance level: for an instance we host, email contact@altius-group.ch with your application credentials (client ID and secret); when self-hosting, set them in your installation's configuration.

Two useful settings:

  • Allowed domains: only addresses from your domains get an account on first sign-in. With no domain, SSO only works for people who were already invited.
  • Synchronised groups: if your provider sends groups, fill in Group at the identity provider on each AltiusForms group. Membership then follows your directory at every sign-in; groups managed by hand in AltiusForms are left untouched.

Two-factor authentication

  1. Open your profile, then Two-factor authentication.
  2. Click Enable two-factor authentication.
  3. Scan the code with an authenticator app (6-digit codes).
  4. Store the recovery codes somewhere safe: you need them if you lose your phone.

Expired session: nothing is lost

If your session expires while you are filling in a form or editing a page, AltiusForms asks you to sign in again. Once you are back, return to the previous tab: it has kept everything you typed. The mobile app does the same (see Signing in).