# Accounts and signing in

> One account for your organization's apps, protected by Authelia.

- Web page: https://documentation.federated.computer/getting-started/accounts-and-sign-in/

## One account, many apps

People in your organization are created once, in Superpanel. That account is stored in a central user directory on your server, and most applications check sign-ins against it. In practice this means:

- The **same username and password** work across the apps that are connected to the directory.
- When someone's password changes, it changes everywhere.
- When someone leaves and their account is disabled in Superpanel, they lose access to the connected apps at the same time.

Many apps also sign you in through [Authelia](https://documentation.federated.computer/apps/authelia/), the single sign-on portal. When you open one of these apps and aren't signed in yet, you are sent to the Authelia sign-in page first, then returned to the app.

> **Some apps keep their own accounts**
>
> A few applications are designed for people outside your organization or hold especially sensitive data, so they use separate accounts. Examples include [Vaultwarden](https://documentation.federated.computer/apps/vaultwarden/) (your password vault has its own master password), and public-facing community or newsletter features in [Discourse](https://documentation.federated.computer/apps/discourse/) and [Listmonk](https://documentation.federated.computer/apps/listmonk/). Each application's page says how sign-in works for that app.

## Signing in for the first time

1. Look for the welcome email from your administrator or from Federated Computer. It contains your username and either a temporary password or a link to set one.
2. Open any application address on your domain. If you're sent to the Authelia portal, enter your username and password there.

   ![The Authelia sign-in page with username and password fields](https://documentation.federated.computer/screenshots/authelia/sign-in.png)

   *The Authelia sign-in page.*

3. If your organization requires two-factor authentication, Authelia will ask you to register a second factor. See [Set up two-factor authentication](https://documentation.federated.computer/apps/authelia/#set-up-two-factor-authentication).
4. Change any temporary password straight away.

## Forgotten passwords

Use the **Reset password** link on the Authelia sign-in page. A reset link is sent to the email address on your account. If you no longer have access to that mailbox, ask an administrator to reset your password in Superpanel.

## Good habits

- Turn on two-factor authentication, even if it's optional for your organization.
- Store your password in [Vaultwarden](https://documentation.federated.computer/apps/vaultwarden/) rather than reusing it.
- Sign out on shared computers. Signing out of Authelia ends your single sign-on session for all connected apps.