Second factor by code
After entering the password, the person confirms a code from their email. You enable the second factor for the whole workspace or for individual accounts.
Features · Security & compliance
Sign-in and access
You invite new colleagues and partners to your workspace by email, defining their role and access groups in advance. A second factor adds extra protection to sign-in. Anyone who works in several workspaces uses a single account for all of them.
Included in: Workspace
What it does for you
Invitations with a plan
When inviting, you define the role and access groups in advance. The permission in your own workspace is enough to invite; nobody needs system access for it.
One account for everything
Anyone who already has an account joins with their password. No second account is created for the same person.
Switch in one click
The footer always shows the active workspace. One click on it switches to another workspace in which your account is a member.
How a new person comes on board
You invite the person by email and define their role and access groups, directly from their contact in the CRM if you wish.
The person redeems the invitation: new people choose their password, existing ones confirm with their current account.
If your workspace requires a second factor, they also enter the six-digit code from their email.
From then on, they work in the workspace and, with several memberships, switch via the footer.
Security in detail
Every confirmation code is only valid for a short time and expires after three incorrect entries.
Whoever sends an invitation can only assign roles and groups within the scope of their own permissions. Workspace checks this again when the invitation is redeemed.
Workspace only switches workspace after the server has confirmed the membership.
If a workspace has its own domain, Workspace opens that address straight away when switching.
The response to a password request does not reveal whether an email address exists in the system.
In the system tenant, Workspace highlights the system context and explicitly asks for confirmation before creating a site or public domain.
Protection that runs in the background
Which workspace is active is determined by the session on the server, not by the address in the browser. That way, your team always works in the right data set.
Workspace stores confirmation codes only as a hash value, never in plain text. Workspace preferably sends sign-in emails via your workspace’s mail server.
Works together with
Transferring credentials securely
You pass on passwords and keys securely to the right person.
Learn moreCloud or your own server
Workspace runs in the cloud or on your own server, with the same sign-in.
View operating modelsWorkspace
One account opens up every area your team has been given access to.
View WorkspaceFrequently asked questions
How is the second factor delivered?
As a code by email. The person enters it after the password and is then signed in.
Can we make the second factor mandatory for everyone?
Yes. You enable it for the whole workspace or only for individual accounts.
What happens if someone forgets their password?
Via the sign-in page, the person requests a code by email and sets a new password. If a second factor is active, this goes through your administration. That way, nobody can take over an account through the mailbox alone.
What does it cost?
We give you the price in an offer, because it depends on the scope of your project.
Let’s set up your access together
In a demo, we show you invitations, the second factor and switching between workspaces in Workspace. Together, we define who starts with which role.