# Sign up and sign in

Access to the Seal Platform is invite-only. Your first sign-in starts from an email invite; once activated, you sign in like any other web application.

## Activating your invite

The first user of a new tenant receives an invite email directly from Seal Security. After that, tenant admins invite additional users from inside the platform.

1. Open the invite email and click the activation link. Invite links expire after **seven days**.
2. Choose how you want to authenticate. The hosted login page offers a password and the social-login providers Seal supports: **Google**, **GitHub**, **Microsoft**, and **Facebook**.
3. If you set a password, follow the strength rules shown on the page.
4. You land in the Seal UI, scoped to the tenant the invite was issued for.

If your organization is configured for SAML single sign-on, you may not need an explicit invite at all. See [Single sign-on and auto-provisioning](#single-sign-on-and-auto-provisioning) below.

## Single sign-on and auto-provisioning

If your organization has SAML single sign-on configured for its Seal tenant:

* New users do not need a separate email invite. The first time they sign in through your identity provider (IdP), Seal auto-provisions their account in your tenant.
* Subsequent sign-ins go through your IdP as usual.

{% hint style="warning" %}
**VERIFY: password fallback for SAML tenants.** When a tenant has SAML configured, password-based sign-in may still be available as a fallback. Confirm before publishing whether passwords remain valid for SAML-tenant users, or whether SAML becomes mandatory for all users in the tenant.
{% endhint %}

## Signing in

For subsequent sign-ins:

1. Go to <https://app.sealsecurity.io/>.
2. Click **Log in** at the top right.
3. Enter your credentials (password or social login).
4. You land in the tenant you most recently visited.

## Switching between tenants

A single Seal account can be associated with more than one tenant, though in practice most users belong to one. After signing in:

1. Click your user-profile icon at the top right of the Seal UI.
2. Select **Switch tenant**.
3. Choose the tenant you want from the picker.

## Forgotten password

The login page does not currently include a self-serve password reset. Contact a tenant admin to have your password reset.

## Related

* [Managing users, roles & SSO](/new-documentation/new-docs/users-and-sso.md): inviting users from inside the platform, configuring SAML, and the user role model.
* [Managing tokens](/new-documentation/new-docs/tokens.md): production and development tokens for the Seal CLI and the Public API.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.sealsecurity.io/new-documentation/new-docs/sign-up-and-sign-in.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.