First Login¶
When your WeftID instance is first set up, you receive an invitation email with a verification link.
Verify your email¶
Click the link in the invitation email. This confirms your email address and takes you to the password setup page. The link is one-time use. If you need a new one, ask your administrator to resend the invitation.
Set your password¶
Choose a password for your account. A strength meter shows how strong your password is as you type. Super admins require a minimum of 14 characters. After setting your password, you are signed in and taken to the dashboard.
Use a password manager to generate a strong, unique password. Do not reuse a password from another account.
Explore the dashboard¶
The dashboard shows your name, email, role, and last sign-in time. As a super admin, you have access to all administrative sections of the navigation bar:
- Directory -- Users, groups, pending requests, the profile attribute catalog, and user exports
- Identity Providers -- Connect upstream SAML and OIDC identity providers, and route users to them by email domain
- Applications -- Register downstream applications for SSO: SAML, OAuth2/OIDC, forward auth, and service accounts
- Security -- Sessions, certificates, passwords, permissions, and authentication policy
- Audit -- Event log and SAML debug log
- Settings -- Branding and tenant display settings
Look for the information icon in the top-right corner of the navigation bar. It links to the documentation page for whichever screen you're on.
Next steps¶
- Connect an identity provider so users can sign in with their existing credentials
- Register an application to enable single sign-on
- Consider registering a passkey for phishing-resistant sign-in
- Review the authentication policy to require strong second factors tenant-wide