Skip to main content

Owner recovery

If SSO is enforced and your identity provider is down or misconfigured, a workspace owner can still get in.

  1. On https://<workspace>.waxell.dev/login, click Identity provider down? Request a recovery link, and enter the owner's email.
  2. If that address belongs to an active owner of a workspace that enforces SSO, Waxell emails a Waxell SSO recovery link. The page shows the same message either way, so it can't be used to discover who is an owner.
  3. The link works once, for 15 minutes.
  4. Opening it allows a password sign-in for the next 15 minutes. Sign in, and fix the provider or turn enforcement off.

Only owners can use it: admins and members can't. Requesting and using a link are both recorded in the audit log.

The owner needs a Waxell password for this to work. Set one before you enforce SSO.