Signing in and single sign-on
How people sign in to ProjectBrain today, how to protect an account with two-factor authentication, and where enterprise single sign-on stands.
Everyone signs in to ProjectBrain with an email address and a password. Each person can add two-factor authentication (2FA) to their own account. Enterprise single sign-on (SSO) through SAML or OpenID Connect is not available yet.
Before you start
Section titled “Before you start”- Anyone with an account can sign in and turn on 2FA for themselves.
- To add or remove people from your organization, you need the
organization.manage-memberspermission. Owners hold it by default.
How people sign in
Section titled “How people sign in”- Go to the sign-in page. It reads Log in to your account.
- Enter your Email address and Password.
- Tick Remember me if you want to stay signed in on this device.
- Select Log in.
If you forget your password, select Forgot your password? on the same page. ProjectBrain emails you a link to set a new one.
New accounts must confirm their email address before they can use most of the app. People usually join an organization through an invitation from an owner or admin.
There is no “Sign in with Google” or “Sign in with Microsoft” button. Connecting your Google or Microsoft 365 calendar or mail in ProjectBrain does not change how you sign in.
Turn on two-factor authentication
Section titled “Turn on two-factor authentication”Two-factor authentication asks for a six-digit code from an app on your phone each time you sign in, after your password. Any authenticator app that supports time-based codes (TOTP) works.
- Open Settings, then Two-Factor Auth. You may be asked to enter your password again.
- Select Enable 2FA.
- Scan the QR code with your authenticator app. If you cannot scan it, copy the Setup key into the app instead.
- Select Continue, then enter the code your app shows and select Confirm.
- Select View Recovery Codes and store them somewhere safe, such as a password manager.
The status now reads Enabled. From your next sign-in, ProjectBrain asks for an Authentication Code after your password.
If you lose your phone
Section titled “If you lose your phone”On the code screen, choose login using a recovery code and enter one of your recovery codes. Each code works once. After you sign in, go back to Two-Factor Auth and select Regenerate Codes to get a fresh set.
To turn 2FA off, select Disable 2FA on the same page.
Who controls what
Section titled “Who controls what”- Each person turns 2FA on or off for their own account. Owners cannot turn it on for someone else.
- ProjectBrain cannot yet require 2FA for everyone in an organization.
- ProjectBrain cannot yet limit sign-in to email addresses from your company’s domain.
Removing someone’s access
Section titled “Removing someone’s access”Removing a person from your identity provider (such as Microsoft Entra ID or Google Workspace) does not remove them from ProjectBrain. Their password still works.
To remove access, an owner or admin removes the person at Settings > Organization > People. Do this as part of your offboarding checklist.
SAML and enterprise SSO
Section titled “SAML and enterprise SSO”ProjectBrain does not support SAML 2.0 or OpenID Connect sign-in yet. That means:
- You cannot connect Okta, Microsoft Entra ID, Google Workspace or another identity provider as the sign-in method.
- You cannot force everyone in your organization to sign in through your identity provider.
- Accounts are not created automatically the first time someone signs in through your identity provider.
If your company needs enterprise SSO, contact the ProjectBrain team at support@useprojectbrain.com. Tell us which identity provider you use. It helps us plan the work.