Documentation
Sign in
Sign in with your email and password or your organisation's single sign-on, and understand every sign-in message.
Overview
The Sign in page at /login is where every session starts. You can sign in with your work email and password, or with your organisation’s single sign-on (SAML). If your account uses multi-factor authentication, DeviceQuest asks for a code next. When you are signed in, DeviceQuest opens Asset Inventory.
This page is open to everyone. If you are already signed in, DeviceQuest skips it and opens Asset Inventory. On a brand-new installation with no accounts yet, DeviceQuest sends you to first-run setup instead.
Screen tour
- EMAIL ADDRESS: your work email. The cursor starts here.
- PASSWORD: your password. While you type, DeviceQuest warns Caps Lock is on. if Caps Lock is active.
- Show password / Hide password: shows or hides the characters you typed.
- Forgot password?: opens the Forgot password page.
- Sign in: signs you in. While it works, the button reads Signing in….
- Sign in with SSO: opens the single sign-on form (see Sign in with SSO).
Under the form, Need an account? Ask your administrator to send you an invitation. reminds you that accounts are created by invitation. Beside the form, the page lists the four areas DeviceQuest covers: Discovery, Inventory, Vulnerabilities and Compliance. The moon/sun button in the top-right corner switches between light and dark mode.
Sign in with email and password
- Open DeviceQuest. When you’re signed out, you land on Sign in.
- In EMAIL ADDRESS, type your work email.
- In PASSWORD, type your password. Click the eye icon to check what you typed.
- Click Sign in, or press Enter.
- What happens next depends on your account:
- No MFA: DeviceQuest opens Asset Inventory.
- MFA enabled: DeviceQuest asks for a code. See Sign in with a code.
- Your role requires MFA but you haven’t set it up: DeviceQuest asks you to set it up now. See Set up MFA when your role requires it.
Sign in with SSO
If your organisation signs in through a SAML identity provider (such as Microsoft Entra ID, Okta or Google Workspace), use single sign-on.
- ORGANIZATION ID: the identifier your administrator gave you for SSO.
- Continue with SSO: sends you to your identity provider. The button is available once you’ve typed an ID.
- Cancel: closes the SSO form and clears the field.
- Click Sign in with SSO.
- In ORGANIZATION ID, type the identifier your administrator gave you.
- Click Continue with SSO.
- Sign in at your identity provider. It sends you back to DeviceQuest, signed in.
Administrators set up SSO, and find the organisation’s identifier, on the SSO page under Admin (see the SSO (SAML) page in the Administration section).
Sign-in messages
When sign-in fails, a red message appears above the form and the cursor moves to it, so screen-reader users hear the reason straight away.
- The sign-in message. It explains what went wrong without saying which field was wrong.
| Message | Cause | What to do |
|---|---|---|
| That email and password don’t match. Check your details and try again. | The email or password is wrong, or a field is empty. | Check both fields. If you’ve forgotten your password, click Forgot password?. |
| This account is deactivated. Contact your administrator. | An administrator has deactivated your account. | Ask your administrator to reactivate it. |
| Too many sign-in attempts. Wait a moment and try again. | Your account is temporarily locked after repeated failures (see Account lockout). | Wait 15 minutes, then try again. |
| Something went wrong on our end. Please try again in a moment. | DeviceQuest had an internal error. | Try again in a moment. If it keeps happening, contact your administrator. |
| Could not reach the server. Check your connection and try again. | The connection between your browser and DeviceQuest dropped. | Check your network connection or VPN, then try again. |
| Could not sign you in. Check your details and try again. | Any other sign-in problem. | Check your details and try again. |
| Caps Lock is on. | A heads-up: Caps Lock is active while you type your password. | Turn Caps Lock off unless your password is in capitals. |
Account lockout
To protect your account from password guessing, DeviceQuest counts failed sign-ins for each email address:
- After 5 failed attempts within 5 minutes, the account is locked for 15 minutes.
- While it is locked, every attempt shows Too many sign-in attempts. Wait a moment and try again., even with the right password.
- After 15 minutes the lock lifts and the count starts again. A successful sign-in also resets the count.
Multi-factor codes have their own limit: after 10 wrong codes within 5 minutes, code entry is locked for 15 minutes.
How long you stay signed in
- A session lasts one hour. After that, DeviceQuest asks you to sign in again.
- Signing in from another browser starts a separate session; your other sessions are unaffected.
- To end a session early, open your account menu at the bottom of the sidebar and click Sign out (see Navigating DeviceQuest).
- When you set a new password with a reset link, your existing sessions end and you sign in with the new password.
If you open a DeviceQuest page while signed out, DeviceQuest sends you to Sign in first.
Access restricted
If you open a page outside your role’s permissions, DeviceQuest shows Access restricted instead of the page.
- Back to dashboard: returns you to the dashboard.
- Sign out: signs you out, so you can sign in with a different account. While it works, the button reads Signing out…. If signing out fails, the page shows Sign out failed. Please try again.
The message names the area you tried to open, for example You don’t have permission to view assets. Contact an admin if you think this is a mistake. Ask your administrator for a role that includes the permission listed at the top of the page’s documentation.
Error screens
DeviceQuest shows a friendly screen instead of a raw error when something goes wrong:
| Screen | When you see it | What to do |
|---|---|---|
| Something went wrong (with Try again) | A page or the sign-in page failed to load. | Click Try again. |
| Can’t reach the server | DeviceQuest’s server is briefly unreachable. Your session is still active, so you stay signed in. | Click Try again after a moment. |
| Something went wrong on the code screen, with Try again and Back to sign in | The MFA code page failed to load. | Click Try again, or Back to sign in to start over. |
Keyboard shortcuts
| Key | Action |
|---|---|
| Enter | Signs in (in either field), or continues with SSO (in ORGANIZATION ID). |
| Tab | Moves between the fields, Forgot password?, Sign in and Sign in with SSO. |