Team sign-in
Only members of your ComputeSphere account can open the service. Visitors select Continue with ComputeSphere, sign in as they do to the console, and get in if their account role is allowed.
Good for internal tools, staging and preview environments.
Turn it on
- Open your service, then Settings › Networking, and find Access protection.
- Select Edit, then choose Team sign-in.
- Under Who can open it, pick the roles that get in: Owner, Admins, Members. Pick all three to let in everyone in the account. See account roles.
- Select Save.
Who gets in
| Choice | Gets in |
|---|---|
| Owner, Admins and Members | Every member of the account, whatever their role |
| Some of them | Only people with a role you picked |
Someone who signs in but isn't allowed sees a page saying they don't have access, with the address they signed in as.
Two-step sign-in
If your account's owner turns on Require two-step sign-in for members (the account's Security settings), SphereGate asks for it too. A member who signs in without an authenticator app or a passkey sees Sign in with two-step to open your service. They select Sign in again and use one of them.
When people leave
Removing someone from your account, or changing their role to one that isn't allowed, removes their access within an hour.
Signing out
Visitors sign out at /.well-known/spheregate/logout on your service's address. Add a link to it in your app, for example:
<a href="/.well-known/spheregate/logout">Sign out</a>