Sign in and your account¶
Company admins sign in to the Tandem portal with an email address and password, not a GitHub account. Your login is created for you when a Tandem operator provisions your company — you receive an invitation email to set your password.
Prerequisites¶
- A Tandem operator has created your company (Customer) and invited you as its admin. If you have not received an invitation, ask your Tandem contact to (re)send it.
- The invitation email — it contains a one-time link to set your password.
First sign-in (from the invitation)¶
- Open the invitation email and click Set your password. The link opens a welcome screen.
- Choose a password (at least 8 characters) and confirm it.
- You are signed in to the portal.
The invitation link is single-use and expires. If it has expired, use Forgot password on the sign-in screen (below) or ask your operator to resend the invite.
Everyday sign-in¶
- From the GitMCloud landing screen, click Company admin sign in.
- Enter your email and password.
- If you have turned on two-factor authentication, enter the 6-digit code from your authenticator app when prompted.
If this is the first time you sign in after an operator created your login directly (rather than by invitation), the portal asks you to change your password before it lets you in.
Forgot password¶
- On the sign-in screen, click Forgot password.
- Enter your email and submit. If an account exists, a reset link is emailed to you. The screen always shows the same confirmation, whether or not the email is registered.
- Open the email, follow the link, and set a new password.
Resetting your password (or an operator resetting it) signs you out of every active session, so anyone using a hijacked session is booted at the same time.
Your account¶
Open the Account menu (your initials, top-right) to manage your own login. It has three tabs:
- Profile — your first and last name. This is the display name other admins and operators see for your login.
- Password — change your password. Changing it signs your other sessions out; the portal signs you back in automatically.
- Two-factor — turn on time-based one-time-password (TOTP) two-factor authentication.
Turn on two-factor authentication¶
- On the Two-factor tab, click Set up.
- The portal shows a secret and an
otpauth://link. Add it to your authenticator app (for example by pasting the link, or entering the secret by hand). - Enter the current 6-digit code to confirm, then Enable.
To turn it off later, enter a current code on the same tab. From then on, every sign-in asks for a code after your password.
Keep your authenticator safe. If you lose it, a Tandem operator can reset two-factor on your login so you can enrol a new device.
Jump to a project¶
The avatar menu (top-right) also has Open a project ↗ — it opens the GitMCloud member app (your GitHub-authenticated projects) in a new browser tab. It does not sign you out of the portal: your portal (email + password) session and your GitHub member session are independent and coexist. From the member side, the Company admin portal ↗ link brings you back the same way.
Troubleshooting¶
| Symptom | Cause | Fix |
|---|---|---|
| No invitation email | Not yet invited, or it went to spam | Ask your operator to resend; check spam |
| "This link is invalid or has expired" | The invite or reset link was already used or timed out | Use Forgot password, or ask for a fresh invite |
| Signed out unexpectedly | Your password was just changed or reset, or the account was suspended | Sign in again; if it persists, contact your operator |
| Asked for a code you can't produce | Two-factor is on and the authenticator is unavailable | Ask a Tandem operator to reset two-factor |
Known limitations¶
- Changing your email address is not self-service in this release — an operator recreates the login against the new address.
- Two-factor recovery is operator-assisted; there are no printable recovery codes yet.