> Index of every Falcon docs page, for assistants: https://falcon.com/docs/llms.txt # Sign-in and your account How people join their company in Falcon, sign in without a password and look after their own settings. Falcon has no passwords. You sign in with a code sent to your email, and you can add an authenticator app or a passkey as another way in. People join by invitation. The first administrator claims the workspace, then invites everyone else with a role. Your own settings live under You: your profile, how you sign in, your notifications and how Falcon looks. ## Features ### Sign in with an email code Type your email address and enter the code Falcon sends you. There is no password to remember or leak. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Sign in from any browser with a one-time code - Use the code alone, or add a second step if your company asks for one In Falcon: Sign in · Second step In the API: `getSignInOptions`, `startSignIn`, `completeSignIn`, `completeSecondStep` ### Authenticator apps and passkeys Add an authenticator app or a passkey as another way to sign in, with backup codes for when you lose a device. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Add or remove an authenticator app or a passkey - Create a new set of backup codes - See where you are signed in and sign out of a session In Falcon: Sign-in & security In the API: `beginSecurityEnrollment`, `confirmSecurityEnrollment`, `removeSecurityMethod`, `regenerateBackupCodes`, `getUserSecurity`, `revokeUserSession` ### Sign in with Google or Microsoft An administrator can let people sign in with their Google or Microsoft work account. Email codes stay available as a way back in. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Switch Google or Microsoft sign-in on for the company - Link your Google or Microsoft account to your Falcon sign-in In Falcon: Security · Sign-in & security In the API: `getSignInOptions`, `startSignIn`, `completeSignIn`, `getCompanyMicrosoftSignIn`, `putCompanyMicrosoftSignIn` ### Set up the workspace The administrator named when the workspace was created signs in once to claim it. Everyone else joins by invitation. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Claim the workspace as its first administrator - Go straight on to invite your team or create the first agent In Falcon: Set up the workspace In the API: `getWorkspaceSetup`, `completeWorkspaceSetup` ### Join by invitation People join a company in Falcon only when someone with the right role invites them. The invitation says which role they get. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Open an invitation link and join with your email - Get the role the invitation names In Falcon: Invitation In the API: `getInvitation`, `acceptInvitation` ### Your profile, notifications and appearance Keep your name and photo current, choose which notices you get, and pick light or dark. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Edit your name and photo - Choose which notifications you get - Pick light, dark or match your device In Falcon: Profile · Notifications · Appearance In the API: `getUserProfile`, `updateUserProfile`, `getUserPreferences`, `updateUserPreferences` ### Verify your phone number Add a mobile number to your profile and confirm it with a code sent by text. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Add and confirm a mobile number In Falcon: Profile In the API: `startPhoneVerification`, `confirmPhoneVerification` ### Phone codes for two-step Use a code sent to your mobile by text, RCS or a call to finish signing in and to confirm it's you. Passkeys and authenticator apps stay the stronger choice. > In pilot: Built, but not yet on for everyone: it is being tried out with pilot companies, waiting on a provider, or still to be released. What you can do: - Add a mobile number as your second step and choose text, RCS or a call - Get a code to sign in or confirm a change, with what it's for shown on screen - Let your company turn phone codes off, or require passkeys or authenticator apps for administrators In Falcon: Sign-in & security · Security In the API: `startPhoneTwoStep`, `confirmPhoneTwoStep`, `setPhoneTwoStepDelivery`, `sendSecondStepPhoneCode` ### Ask to join a company Someone with a company email address can ask to join, and an administrator says yes or no. > Coming next: Designed and planned, not built yet. What you can do: - Ask to join from the sign-in page - Approve or turn down requests as an administrator ## Who can do what Who may do each thing in this guide, and what an AI assistant connected as that person may do with it. Roles are set in Company settings › Roles. | What | Who may | An assistant | |---|---|---| | Read sign-in choices | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Start signing in | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Finish signing in | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Verify a second sign-in step | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Start adding a security method | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Verify a new security method | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Remove a security method | People who can edit it | Cannot be undone · needs “change settings” · waits for your approval | | Replace backup codes | People who can edit it | Cannot be undone · needs “change settings” · waits for your approval | | Reads your own sign-in methods and sessions | Anyone who can see it | Reads · needs “look” | | Signs you out of one session, or everywhere | People who can edit it | Cannot be undone · needs “change settings” · waits for your approval | | Read Microsoft sign-in settings | Company administrators | Reads · needs “look” | | Save Microsoft sign-in settings | Company administrators | Changes · needs “change settings” · waits for your approval | | Read workspace setup | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Finish workspace setup | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Read a membership invitation | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Accept a membership invitation | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Reads your own profile | Anyone who can see it | Reads · needs “look” | | Changes your own profile | People who can edit it | Changes · needs “change settings” · waits for your approval | | Reads your own preferences | Anyone who can see it | Reads · needs “look” | | Changes your own preferences | People who can edit it | Changes · needs “change settings” · waits for your approval | | Send a phone verification code | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Verify a phone number | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Send a code to add a phone for two-step | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Confirm the code and turn on phone two-step | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Choose how phone codes are sent | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | | Send a phone code for a second step | The browser holding the required sign-in, setup, enrollment or consent challenge; callbacks also require their bound state. | Not offered to assistants | ## Related - Next: [Agents](https://falcon.com/docs/agents.md) - [Glossary](https://falcon.com/docs/glossary.md)