Documentation

Welcome to DeviceQuest

Create your organisation and the first administrator account on a new DeviceQuest installation.

Overview

The first time anyone opens a new DeviceQuest installation, DeviceQuest shows the Welcome to DeviceQuest screen at /onboarding instead of the sign-in page. Here you create your organisation (the tenant) and its first administrator. You do this once per installation. As soon as the first account exists, the setup screen closes for good, and every later visit goes to the sign-in page.

This screen opens without an account or permission. On hosted installations, the screen is protected by a one-time setup link instead (see Hosted installations: the setup link).

Screen tour

The screen has a short welcome text, Create your first tenant and admin user to get started., and one form:

#	Element	What it does
1	Organisation name	The name of your organisation. DeviceQuest shows it in the sidebar under your name and in invitation emails.
2	Admin email	The email address of the first administrator. You sign in with it.
3	Admin password	The administrator’s password. It must meet the password policy. A checklist under the field lists the rules and ticks each one as soon as your password meets it.
4	Create admin and continue	Creates the organisation and the administrator, then takes you to the sign-in page. While it works, the button reads Creating….

Set up a new installation

Open DeviceQuest in your browser. A new installation sends you to Welcome to DeviceQuest automatically.
In Organisation name, type your organisation’s name.
In Admin email, type the email address of the first administrator.
In Admin password, type a password that meets the password policy. Keep typing until every rule in the checklist under the field is ticked.
Click Create admin and continue.
On the sign-in page, sign in with the email and password you just chose.
The administrator role requires multi-factor authentication. DeviceQuest asks you to set it up during this first sign-in. Follow Set up MFA when your role requires it.

What setup creates

When you click Create admin and continue, DeviceQuest prepares the new organisation in one step:

The organisation (tenant), named after Organisation name.
The administrator account, with your email as its display name. You can change the name later.
The admin role, a system role with every permission that requires multi-factor authentication. The new account gets this role.
Built-in dashboards: Executive Summary (the default), Asset Inventory, Security Posture, OS Distribution, Software Landscape, Device Overview, Discovery Trend, Data Quality, Discovery Sources, Asset Recency, Network Visibility, Hardware Inventory, Hardware, Software Compliance, Normalization Health and Operations Overview.
3 built-in reports: Asset Inventory Summary, Full Asset Audit and Software Inventory.

To bring in your colleagues after setup, invite them from Admin → Users (see Invitations and passwords).

Password policy

Every DeviceQuest password, including the one you choose here, must have:

Rule	Example of a character that counts
At least 12 characters
One uppercase letter	`A`–`Z`
One lowercase letter	`a`–`z`
One number	`0`–`9`
One special character	any printable symbol, such as `! # $ % - _ .`

On the setup screen, the checklist under Admin password shows these rules and ticks each one as your password meets it. If you click Create admin and continue while a rule is still unticked, the form shows Password does not meet all requirements. and keeps your entries.

Hosted installations: the setup link

On hosted installations, the operator protects the setup screen with a one-time link, so the intended person claims the new installation.

The operator sets the DEVICEQUEST_ONBOARDING_TOKEN environment variable on the control plane to a long random value.
Optionally, DEVICEQUEST_ONBOARDING_TOKEN_EXPIRES sets an expiry time in RFC 3339 format, for example 2026-11-01T12:00:00Z.
The operator then sends you the setup link: https://<your-devicequest-host>/onboarding?token=<token>.

Open the link and complete the form as described above. The token travels with the form, so it is applied automatically. The link works until the first account exists; from then on, setup is complete and every visit goes to the sign-in page. Standalone installations run without a token, and the setup screen opens for the first visitor.

Messages

Message	Meaning	What to do
Enter an organisation name and an admin email.	Organisation name or Admin email is empty.	Fill in both fields.
Password does not meet all requirements.	The password breaks the password policy.	Choose a password that ticks every rule in the checklist.
This setup link is not valid. Open the complete link you were given.	The installation uses a setup link, and the link you opened has no token or a different one.	Open the exact link the operator sent you.
This setup link has expired. Ask your administrator for a new one.	The setup link’s expiry time has passed.	Ask the operator for a new link.
Setup has already been completed for this installation.	The installation already has an account.	Click Go to sign in next to the message and sign in.
Your session could not be verified. Reload the page and try again.	The browser’s security check for the form expired, for example after the page was open for a long time.	Reload the page and submit the form again.
Could not reach DeviceQuest. Check your connection and try again.	The browser could not connect to DeviceQuest.	Check your network connection, then try again.
Some details could not be read. Check the form and try again.	DeviceQuest could not process the form.	Check the fields and submit again.
Setup could not be completed. Try again in a moment; if it keeps failing, contact support.	DeviceQuest hit an unexpected problem while creating the account.	Wait a moment and try again. If it keeps happening, contact support.