Skip to main content

Authentication

Authentication is the process by which WorkspaceBuilder verifies who you are before granting access to the platform. All identity and session management is handled by a secure authentication system. The application itself never stores or handles passwords directly.


How Authentication Works

When a user accesses WorkspaceBuilder, the following happens:

  1. The platform displays the login page.
  2. The user enters their credentials (email and password).
  3. The platform validates the credentials and creates a secure session.
  4. The platform extracts the user's organization and roles, and grants access accordingly.

Every subsequent action the user takes is authenticated using this session.


Two Ways to Get Access

MethodDescription
Self-RegistrationAny new user can visit the sign-up page, fill in the registration form, and verify their email to create an account.
InvitationAn Admin invites a user by email through User Management. The invited user registers via the invitation link and is automatically linked to the inviting organization.

Roles and Access

Every user in WorkspaceBuilder has at least one role within their organization. Roles control what the user can see and do:

RoleWhat they can do
AdminFull control — manage users, projects, settings, and workspace configuration
DesignerBuild and modify forms and workflows; cannot create projects or invite users
UserFill forms, submit data, and view their own submissions
Internal UserSimilar to User but limited to internal-only content

Roles are assigned at the organization level and can be updated by an Admin at any time from User Management.


Organization and Multi-Org Login

A user's email can be associated with more than one organization. When logging in with a multi-org email, the platform displays an organization selector before the password step. The roles and access the user receives depend on which organization they select.


What's in This Section

PageDescription
Account CreationHow to register a new account, registration form fields, email verification flow, and post-registration behavior
Sign InThe full sign-in flow, multi-organization login, post-login behavior, and security notes