Axiom StudioAXIOMSTUDIO
All docs

Email and Password Login

AxiomCloud supports first-party email/password accounts for users who are not routed through SAML SSO. The same flow is also used to bootstrap a workspace before SAML is configured.

Sign up

  1. Open the AxiomCloud sign-up page.
  2. Enter your name, work email address, and password.
  3. Complete the reCAPTCHA check when it is enabled for the environment.
  4. Submit the form.

After sign-up, AxiomCloud sends a verification email. The account cannot be used until the email address is verified.

Verify your email

Open the verification link from the email sent by AxiomCloud. Verification proves ownership of the address and activates the account.

For workspace domains, verification is also what allows AxiomCloud to create or join the matching organization. The first verified user for a workspace organization is granted organization admin access, which lets that user configure settings such as SAML SSO.

Sign in

The login page starts with an email address:

  1. Enter your email address.
  2. AxiomCloud checks whether the email domain has an enabled SAML SSO configuration.
  3. If SAML is enabled for the domain, you are redirected to the identity provider.
  4. If SAML is not enabled for the domain, continue with password sign-in.

This keeps SAML-managed domains on the identity provider while preserving email/password access for personal accounts, bootstrap admins, and domains that have not enabled SSO.

Password reset

Use Forgot password? on the login page when you cannot sign in with your password.

  1. Enter the account email address.
  2. Open the reset link from the password reset email.
  3. Enter a new password.
  4. Return to login and sign in with the new password.

Reset links are time-limited and tied to the account email address. If the link expires, request another reset email.

Relationship to SAML SSO

Email/password login and SAML SSO share the email-first login screen. SAML takes over only when an enabled SAML configuration owns the submitted email domain.

Before SAML exists for a workspace, at least one admin needs email/password access so they can sign in, verify the workspace domain, and open Admin -> Single Sign-On. After SAML is enabled, users on the configured domains are routed through the identity provider, while other domains continue to use password sign-in.

See SAML SSO Configuration for identity-provider setup, allowed domains, attribute mapping, and login behavior.