Profile and Two-Step Sign-In
Every UTMStack v12 user has a Profile page where they manage their own name, email, language, password, open sessions and two-step sign-in (two-factor authentication, or 2FA). Two-step sign-in asks for a 6-digit code after the password, from an authenticator app or by email.
Open your profile
Click your avatar in the top-right corner and choose Profile. Every user can open their own profile, whatever their role.
Picture and personal information
Change avatar uploads a picture (PNG, JPEG, WEBP or GIF, up to 2 MB). Remove avatar removes it.
Under Personal information, change your Name, Email and Language, then click Save changes. Choose System default as language to follow the platform's default language.
Your email address is also the name you sign in with. Administrators cannot change these fields for you.
Before you change your email address, check two things:
From the next sign-in, you sign in with the new address.
If you sign in through single sign-on, your identity provider must send the new address too, because UTMStack matches single sign-on accounts by email. Otherwise single sign-on no longer finds your account.
Change your password
Under Password, enter your Current password.
Enter the New password (at least 8 characters) and type it again in Confirm new password. The new password must be different from the current one.
Click Update password.
Changing your password signs you out of all your other sessions.
Active sessions
Active sessions lists the devices where you are signed in, with the browser, the operating system and when you signed in. Your current session is marked This device.
Click Revoke to end one session.
Click Sign out of all other sessions to end every session except the one you are using.
A user can have up to 10 sessions at the same time. When you sign in an eleventh time, the oldest session is ended.
A session you revoke can no longer renew its sign-in. A page that is already open on that device stops working within one hour.
Two-step sign-in
Two-step sign-in is off for every user until they turn it on. There is no setting that turns it on for everyone; ask your users to enable it in their profile.
There are two methods:
| Method | How you get the code |
|---|---|
| Authenticator app (recommended) | An app such as Google Authenticator or 1Password shows a new 6-digit code every 30 seconds. |
| Email code | UTMStack emails you a 6-digit code at each sign-in. Needs an email address in your profile and a working mail server (see Email Configuration). |
Turn on two-step sign-in
- 1
Start
Open Profile. Under Two-factor authentication, click Enable.
- 2
Choose a method
Choose Authenticator app or Email code and click Continue.
- 3
Connect your authenticator or check your email
Authenticator app: scan the QR code with your app. If you cannot scan it, type the key shown under "Or enter this key manually" into the app.
Email code: open the email UTMStack sent you. Click Resend if it does not arrive.
- 4
Confirm
Enter the 6-digit code and click Verify & enable. The section now shows Two-factor authentication is on and the method you chose.
Sign in with two-step sign-in
Enter your email and password on the sign-in page and click Sign in.
On Two-factor verification, enter the 6-digit code from your authenticator app or from the email, and click Verify.
An emailed sign-in code is valid for 5 minutes.
Turn off two-step sign-in
Open Profile. Under Two-factor authentication, click Disable.
Enter your current password and click Disable 2FA.
If you lose your authenticator
UTMStack has no recovery codes. Ask an administrator to reset your two-step sign-in on the Team page (see Users). You can then sign in with your password alone and turn two-step sign-in on again.
Single sign-on and two-step sign-in
Users who sign in through a SAML 2.0 or OpenID Connect identity provider do not get the UTMStack code step. Set up multi-factor sign-in in your identity provider instead.
Users who sign in through an LDAP or Active Directory provider use the normal sign-in form and get the UTMStack code step if they turned it on.
Accounts created by single sign-on have no UTMStack password, so the Password section does not apply to them.
See Single Sign-On.
Messages and what they mean
| Message | Cause | Fix |
|---|---|---|
| "Current password is incorrect" | The current password you typed is wrong | Type it again. If you forgot it, sign out and use Forgot? (see Users). |
| "Password must be at least 8 characters" or "Passwords do not match" | The new password is too short, or the two fields differ | Fix the new password. |
| "That email is already in use" | Another account in your organization has that address | Use another address, or ask an administrator. |
| "Image type not allowed (use PNG, JPEG, WEBP or GIF)" or "Image is too large (max 2MB)" | The avatar file is of the wrong type or too large | Use a PNG, JPEG, WEBP or GIF image of 2 MB or less. |
| "Invalid or expired code" | The code is wrong, was already used, or has expired | For an authenticator app, check that the phone's clock is set automatically; codes depend on the time. For email, use the latest code within 5 minutes. |
| "Please wait a moment before requesting a new code" | You asked for a new email code too soon | Wait about half a minute. |
| "Two-factor by email needs a mail server…" | No mail server is set up | Ask an administrator to set up Email Configuration, or use an authenticator app. |
| "This code has expired. Sign in again." | The code step took longer than 5 minutes | Go back and sign in again. |
| At sign-in: "the second factor is sent by email, and no mail server is configured" | Your account uses email codes and mail stopped working | Ask an administrator to fix Email Configuration, or to reset your two-step sign-in. |