Console authentication

AACSearch uses three kinds of credentials. They are not interchangeable:

Register and recover access

Register in Console, verify your email and select an organization. Use Forgot password to request a reset link. Open the most recent link and choose a new password. If an email does not arrive, check spam and ask the deployment operator to verify delivery; do not assume that a successful form submission proves delivery.

Only configured social/OIDC providers are shown on the sign-in screen. An organization requiring SSO refuses password sign-in for its members.

Manage sessions

Open Profile → Security to inspect active sessions, revoke another session or change your password. Keep the current session identifiable before revoking access on other devices. Organization owners manage member permissions separately under Team/Roles.

Two-factor authentication

Profile → Security also manages TOTP two-factor authentication. Enabling it asks for your password, shows a QR code to scan into an authenticator app, and then shows backup codes once — store them somewhere safe before closing the dialog, because they are the only way back in if you lose the authenticator.

Only authenticator apps are supported. There is no email or SMS code, so a lost device is recovered with a backup code or by an administrator.

Verify: sign out and back in — you are asked for a code from the app.

Do not share session cookies, reset links, API keys or provider secrets. If access remains unavailable, contact support with the time, operation and a redacted error. For payment-related access, see billing.