Activate the organization and create the first passkey

In this tutorial, we activate your organisation and create the first passkey. By the end, your administrator account is protected, and you know what to set up next. When your provider creates the organisation, it waits for activation. You receive the organisation's address and an activation link, or a single-use code. The code is valid for seventy-two hours, and only once.

Open the activation link. The page confirms that the link was received and removes the code from the address bar. If you only have the code, type it into the Activation code field. Choose the administrator password, a long one, at least fifteen characters, and repeat it. The password is only a fallback: administration always requires the passkey. Name the passkey, for example after your laptop, and choose Activate and create passkey.

The system asks for the device's biometrics or PIN. Confirm the creation and, right after, the sign-in. The organisation is active, and you are already signed in with your passkey. Biometrics never leave the device: the service only receives a signature. If the passkey step fails, activation stays in progress. Sign in on the normal page with the email and password you chose, choose Continue activation, and create the passkey.

The code is no longer needed. Now add a second passkey on another device. Under Protect, Trusted devices, choose Create passkey, give it a name, and confirm on the device. With two passkeys, losing one won't lock you out. Under Manage, Organisation, the Finish setup card shows what is missing. Create a second administrator with a passkey, and generate the emergency recovery codes.

Keep them away from the computer. Next, set the sign-in security, publish an access policy, and bring in your people, by hand or from your directory. Without an active policy, sign-ins to applications are refused. From now on, to sign in, open the organisation's address, type your email, and choose Sign in with passkey. One confirmation on the device, and you're in.

And that's it: the organisation active, and the administrator protected by a passkey. In the next tutorial, we'll set up privileged access to servers.