Signing in
The sign-in screen asks for your email address before it asks for anything else. That first step isn’t cosmetic — it’s how ScatterSpoke works out whether your organization uses single sign-on.
Sign in with an email address and password
Section titled “Sign in with an email address and password”- Enter your email address and choose Continue.
- ScatterSpoke checks the email domain against configured SSO.
- If your domain has SSO configured, you’re sent to your identity provider and finish there. Nothing else on this page applies.
- Otherwise, the password field appears and the button changes to Sign in.
- Enter your password and choose Sign in.
If the workspace has two-factor authentication on your account, you land on the verification screen — see below.
Sign in with a passkey
Section titled “Sign in with a passkey”If you’ve registered a passkey, you don’t need step 2 at all. The sign-in page arms passkey autofill as soon as it loads, so selecting the email field offers your saved passkey directly from the browser. Choosing it signs you in and skips the password entirely.
The offer appears only when the browser supports conditional WebAuthn — if you don’t see it, use the password path above; nothing is broken. Autofill is also deliberately not armed on local loopback addresses, which matters only if you’re running ScatterSpoke locally.
Registering a passkey in the first place is covered in passkeys.
Sign in with a provider
Section titled “Sign in with a provider”Three buttons sit above the email field:
- Continue with Google
- Continue with Microsoft
- Continue with Okta SSO — type your work email into the field below first, then choose this. It needs an address to resolve your domain against and will say so if the field is empty.
If your identity provider rejects the attempt, you’re returned to the sign-in page with a message telling you to try again or contact your administrator. That message means the failure happened at the provider, not in ScatterSpoke.
Complete a two-factor challenge
Section titled “Complete a two-factor challenge”With two-factor authentication enabled, a correct password takes you to a Two-factor authentication screen rather than into the workspace.
With your authenticator app:
- Open the app and read the current code for ScatterSpoke.
- Enter it in Authentication code. The field takes six digits.
- Choose Verify code.
Verifying this way also marks the device as trusted, so you won’t be challenged on every sign-in from it.
If you can’t reach your authenticator:
- Choose Use a recovery code.
- Enter one of the recovery codes you saved when you enabled two-factor authentication.
- Choose Verify recovery code.
Use authenticator code switches back if you find your phone after all.
Setting up, changing, or turning off two-factor authentication is covered in two-factor authentication.