Sign in and where Governax sends you

Governax never sends you straight to a saved URL after sign-in. It resolves where you belong first, which is why the landing page can differ from one sign-in to the next.

Signing in#

Sign in with your email and password, or with Google, Microsoft or GitHub if that provider is configured for your deployment. If two-factor authentication is enabled on your account, the password step does not sign you in: you are asked for a code first, and no session exists until you provide it. You have ten minutes to complete that step.

Where you land#

Every successful sign-in, from any route, passes through one resolver that decides where to send you. It checks in this order and stops at the first match:

1. Are you a Governax platform administrator?   -> the admin console
2. Do you belong to no organisation at all?     -> the setup wizard
3. Is your account pending or rejected?         -> the pending screen
4. Is every organisation you belong to suspended? -> the suspended screen
5. Otherwise                                    -> an entity dashboard

For the last case, Governax remembers the entity you were last working in and returns you there if it is still available, otherwise it picks the first one. If the organisation has no entities at all, you land on the entity settings page instead of a dashboard.

How long a session lasts#

Revoking a session takes effect on the very next request rather than waiting for a cache to expire, which matters when you are removing access from a lost device. Managing your sessions is covered in Your profile and active sessions.

Signing out#

Sign out from the account menu in the top right. This ends the session on the current device only. To end sessions elsewhere, use the session list, or change your password with the sign-out-other-sessions option, which is described in Passwords.

Completing a password reset from an emailed link ends every session on the account, including the one you are using.