Sign-in and SSO

Sign-in and SSO

Sign in to TxHub with your work account over single sign-on, with a password, and with two-factor authentication. What admins set up.

You sign in to TxHub in two places: the dashboard at app.txhub.is, and the TxHub app on each device you connect. Both use the same account. If your company uses single sign-on (SSO), you sign in with your work account. Otherwise you use an email and password. Either way you can add two-factor authentication for extra safety.

How it works

Account typeHow you sign in
Work account (SSO)Your company’s Microsoft Entra ID (Microsoft 365) account. TxHub sends you to Microsoft to sign in, then brings you back. You never set a TxHub password.
Email and passwordAn account an admin created for you on the Users page, with a password of at least 8 characters.

TxHub decides which one applies from your email address. If your email domain is set up for single sign-on, you always sign in with SSO. Password sign-in is turned off for those addresses, even if a password was set earlier.

Sign in to the dashboard

  1. Go to app.txhub.is/dashboard, enter your Email and click Continue.
  2. If your organization uses SSO, you see “Your organization uses single sign-on.” Click Continue to your organization’s sign-in → and sign in with Microsoft.
  3. Otherwise a Password field appears. Enter your password and click Sign in.
  4. If two-factor authentication is on, enter the 6-digit code from your authenticator app.
Note
TxHub never sends you to Microsoft on its own. You always click the button yourself, so you can check that the next page really is Microsoft’s sign-in page.

If you see “No network access yet”, you signed in fine but you are not a member of any TxNet. Ask an admin to add you, or to invite you if your company uses auto-join. See Organizations and users.

Sign in on a device

When you connect a device, the TxHub app opens a sign-in page in your browser. The device joins your TxNet as soon as you finish.

  1. In the TxHub app, click Log In… (macOS) or Log in… (Windows). On Linux, run sudo txhub up and open the link it prints.
  2. On the How do you want to sign in? page, choose Work / SSO account and enter your work email, or choose Personal account and enter your email and password.
  3. If two-factor authentication is on, enter your code (or a recovery code).
  4. If you belong to more than one TxNet, choose which one to add the device to under Choose a TxNet.
  5. When you see You’re connected, close the browser tab.

If you are already signed in to the browser, you may see Confirm this device instead. Check that the device name is the one you just started, then click Connect.

Important
Only click Connect if you started the sign-in yourself, on a device you own. If you didn’t, close the page. Someone may be trying to add their device to your network.

Servers and other devices without a person in front of them use an enrollment key instead of a browser sign-in:

sudo txhub up --auth-key=<your enrollment key>

See Enrollment keys.

Two-factor authentication

Two-factor authentication (MFA) asks for a 6-digit code from an authenticator app, such as Google Authenticator, each time you sign in. It works for both password and SSO accounts, on the dashboard and when you add a device.

Turn it on

  1. In the dashboard, open My settings and the Security tab.
  2. Click Enable Google Authenticator.
  3. Scan the QR code with your authenticator app. If you can’t scan it, type in the key shown under “Can’t scan?”.
  4. Save your recovery codes somewhere safe, tick I have saved my recovery codes, then enter the current code from the app and click Confirm & continue.
Tip
Each recovery code works once. Use one if you lose your phone: on the code screen, choose Use a recovery code instead. They are shown only once, so store them in a password manager.

New recovery codes, or turning it off

  • Regenerate recovery codes creates a fresh set and makes all the old ones stop working.
  • Disable turns two-factor authentication off.

Both ask you to confirm with your password or a current authenticator code. SSO accounts have no TxHub password, so use a code.

When an admin requires it

An admin can require two-factor authentication for a person. The next time that person signs in to the dashboard, they are asked to set it up before they can continue, and they cannot turn it off. If they try to add a device before setting it up, the browser page says “Two-Factor Authentication Required”. They should sign in to the dashboard first, set it up, then try the device again.

What admins can do

Admins and owners manage sign-in for people in their TxNet from Users, in each person’s actions menu:

  • Require MFA: make two-factor authentication compulsory for that person.
  • Reset MFA: clear their authenticator and recovery codes, for example after a lost phone. They set it up again the next time they sign in.
  • Set Password: give a password account a new password. There is no “forgot password” link, so this is how a person gets back in.

Single sign-on itself is set up by TxHub when your organization is onboarded: TxHub connects your Microsoft Entra ID directory and adds your email domains. After that, your organization’s managers handle auto-join and invites under SSO in the sidebar. Your IT admin can follow Set up SSO with Entra ID to prepare the Microsoft side. To set up SSO, or to add a domain, contact info@txhub.is.

Change your password

Password accounts can change their password from the account menu: click your name at the bottom of the sidebar, choose Change Password, enter your current password and a new one of at least 8 characters.

Troubleshooting

  • Your password is refused: check the address for typos. If your company uses SSO, a password will never work for your work address. Click Use a different email, enter your work email and continue with SSO.
  • “Invalid code”: make sure your phone’s clock is set automatically. Authenticator codes depend on the correct time.
  • “Too many attempts”: wait a little and try again.
  • “You have reached your machine limit” when adding a device: an admin has capped your number of devices. Remove an old device or ask an admin to raise the limit.

More fixes are on the Troubleshooting page.