Signing in and your account

The sign-in page offers whichever methods your administrator has turned on:

Sign in with … buttons for single sign-on (OpenID Connect or SAML). Your browser goes to your identity provider and comes back signed in. The button label is set by your administrator; without one it reads Sign in with single sign-on or Sign in with SAML.
A Username and Password form. If directory sign-in (LDAP or Active Directory) is on, choose between your directory account (labelled Company directory unless your administrator renamed it) and FireSight account. The directory choice is selected first.

Click Sign in. Every sign-in and every failed sign-in is recorded in the audit log.

Note

When FireSight accounts are switched off, the second choice reads FireSight administrator and the page says FireSight accounts are turned off for everyone except administrators. Only administrators can still sign in with a FireSight account, so there is always a way in.

FireSight has no separate two-factor step of its own. To require multi-factor authentication, use single sign-on and enforce it at your identity provider.

Locked out

After a number of failed sign-ins in a row (5 by default), the account is locked for a while (15 minutes by default) and the message reads account temporarily locked after repeated failed sign-ins. This applies to FireSight accounts and to directory accounts signing in through FireSight. An administrator can unlock it straight away under Settings, Users & access with Unlock. Both numbers are set under Settings.

Message	Meaning
invalid username or password	The user name or password is wrong. It doesn't say which.
account disabled	An administrator turned off Account can sign in.
sign-in with FireSight accounts is turned off; use your company sign-in	Use the directory or single sign-on instead.
your account isn't in any group that has access to FireSight	Your directory groups map to no role, and no default role is set. Ask an administrator.
an account with this username already exists for a different sign-in method	A FireSight account already has this user name. A directory or single sign-on account can never take it over.
this sign-in link has expired or was already used; sign in again	Single sign-on hands back a one-time code that works once, for 60 seconds. Sign in again.

If single sign-on fails, you're returned to the sign-in page with the reason.

Your account

Open your name at the bottom of the menu. Your account shows your Username, Name, Roles, Sign-in method and Last sign-in.

Change your password

Only for FireSight accounts; directory and single sign-on passwords are changed in your directory.

Enter your Current password.
Enter a New password and Repeat new password. It needs at least 12 characters (or more if your administrator set a longer Minimum password length) and three of: lowercase, uppercase, digits, symbols.
Click Change password. You're signed out and sign in again with the new one.

Sign out everywhere

Under Sessions, Sign out everywhere ends every session you have, on every device, including this one. Use it if you lost a laptop or left yourself signed in somewhere.

These also end every session of a person: changing or resetting their password, changing their roles, and disabling the account.

Sessions

A session lasts 480 minutes (8 hours) by default; administrators can change Session length (minutes).
Sessions are kept in the browser tab's session storage, so they end when you close the tab.
Sign out at the bottom of the menu ends the session in this tab.
If your session ends while you work, the next action returns you to the sign-in page.