Signing in
An installation chooses its sign-in provider:
- Quasar's own accounts: password and second factor, with password reset by email.
- An OpenID Connect provider: your organization's single sign-on.
Who may enter is decided by the identity the provider asserts, never by an email address alone. A person reaches an organization by:
- an invitation;
- an existing identity;
- membership the provider vouches for.
Sessions are kept on the server, in a cookie that carries no personal data.