Docs / Pages

Sign in and sign up

How people sign in at /login, why /signup only redirects, and where each role lands afterwards.

There is one entry point, /login. /signup redirects to it and keeps a valid next (old links keep working): the identity provider decides whether the person is new or returning.

What the page offers#

  • Continue with Google: a full-page navigation to /v1/auth/workos/login.
  • Company single sign-on: /v1/auth/workos/login?sso=1.
  • Staff sign in: /v1/auth/workos/login?staff=1 (VendorLogic staff only).
  • Reference providers do not need an account; they answer through a private link (Reference responding).

An already signed-in visitor is redirected to next or to /post-login. Failures return as ?error= and show a message with the next step and a Get help link to /support: denied (this account cannot sign in: try another Google account or ask support), state (the sign-in session expired: choose Continue with Google again) or anything else as a generic failure.

The next parameter#

next is kept only when it is a path on this site: it must start with a single /, no backslashes or control characters, at most 2048 characters, checked again after URL decoding. Anything else is ignored.

Who becomes what#

Signing in alone never creates staff and never joins an existing organization. A new person with no organization is sent to onboarding to create one, or signs in with the email address a teammate invited to join that organization.