Signing In

Overview

Brolly signs you in with your email address and password. Depending on how your organisation is set up there may be a second step — a code sent to your email, or a redirect to your organisation's own sign-in — and this article covers each of them, along with the pages you see when you reset a password, accept an invitation or reach the end of a trial.

How to Get There

1. Open Brolly in your browser. If you are not signed in, the sign-in page opens
2. Signed-in sessions take you straight to Home; use Log out in the account menu at the bottom of the sidebar to return to the sign-in page

The Sign-in Page

Sign-in happens in two steps on the one page:

1. Type your Email address and click Continue. Brolly checks how the organisation that address belongs to signs in — with a password, or through single sign-on — without revealing whether the address has an account
2. Type your Password and click Sign in. The eye icon shows or hides what you have typed, and Sign in stays greyed out until the field has something in it

Your email stays on screen above the password field with a Change link beside it — click it if you typed the wrong address; it clears the password and returns you to the first step.

A wrong password shows "Invalid email or password" beneath the fields.

The password step also has:

• Remember me — keeps you signed in on this browser so you are not asked for your password every visit. Leave it unticked on a shared computer
• Forgot password? — starts a password reset
• Start free trial — for people who do not have a Brolly organisation yet; it opens the registration page

Too many failed sign-in attempts lock the account for a short time. If you see a "temporarily locked" message, wait about twenty minutes rather than retrying.

The Two-factor Code

If your organisation has two-factor authentication switched on, a Login Verification step follows your password: "Your account is protected by two-factor authentication. We sent a code via email which you can enter below." Type the six-digit code into the boxes (or paste the whole code — it fills them all) and click Continue, which stays greyed out until all six digits are in. A wrong code shows "Incorrect code. Please try again."

• Resend email under the boxes sends a fresh code if the first one does not arrive. Check your junk folder first; after each send the link counts down ("Resend in 60s") before it can be used again
• Two-factor is switched on for the whole organisation by an Owner under Settings → Organisation, not per person, so there is nothing for you to set up. See Organisation

Sign in with SSO

If your organisation uses single sign-on, what happens after you enter your email depends on how it is set up:

• SSO required — you are sent straight to your organisation's identity provider (Microsoft, Google, Okta or another) to sign in there, then returned to Brolly signed in. You are never asked for a Brolly password; once SSO is switched on for an organisation, passwords stop working for everyone in it
• SSO optional — the password step appears as usual with a Sign in with SSO button beneath it (after an "or" divider). Either route works

If the identity provider signs you in with a different account from the email you entered, Brolly refuses with a message asking you to sign out of the identity provider, or use a private window, and try again. Any other hiccup shows "Single sign-on didn't complete. Try again, or contact your organisation's administrator."

SSO is set up by an Owner under Settings → Organisation — see Organisation.

Resetting Your Password

1. On the password step, click Forgot password?
2. On Forgot your password? type your Email address and click Send link. The page changes to Check your email: Brolly has emailed instructions for setting your password, if an account exists for that address — it never says whether one does. If nothing arrives, check the address and your junk folder; another link can be requested after a few minutes. Go to login returns you to the sign-in page
3. Open the email and follow the link. The Password reset page ("Set a new password") asks for a New password and Confirm password; the two must match or it says "Passwords do not match."
4. Save it. The page confirms your password has been updated; click Go to sign in and sign in with the new password

A reset link only works for a short time. If the page says the link has expired or is invalid, click Request a new link and start again. Back to sign in returns you to the sign-in page at any point.

Accepting an Invitation

When an Owner adds you on Settings → Team, Brolly emails you an invitation. Following its link opens the You've been invited page:

• Your First name and Last name are filled in from the invitation ("Name details come from your invitation") and your email is the one it was sent to
• Choose a Password and type it again under Confirm password (they must match)
• Submit, then sign in

If your organisation uses single sign-on there is no password to choose: you accept the invitation by signing in with your organisation's account instead.

Invitation links expire. If the page says the invitation is invalid or has expired, ask the person who invited you to send it again; Go to sign in takes you back to the sign-in page. Until you accept, you appear as Pending in the Team table and in the Team chip on Home.

Verifying Your Email

Two things ask you to verify an email address:

• A new organisation. After registering through Start free trial, the page says Check your email and that a verification link has been sent. Click the link to activate the account; the page then offers Sign in. An expired or invalid link offers Start a new registration
• A changed address. Changing the email on your profile requires re-verification in the same way before the new address takes effect

Back on the sign-in page, a note confirms your account is verified and that you can sign in.

When a Trial Ends

At the end of a free trial, signing in opens a full-screen Trial ended page in place of the app: "Your trial has ended. Thanks for trying Brolly. Let's find the right plan to keep you going." Your archive is not touched; the page simply asks Where to next? and offers two routes:

• Talk to our team — sends your details to the Brolly team, who contact you about an ongoing plan

• Request an extension — opens a short form. Choose a Reason for request from the list:

  • I am waiting for colleagues to assist with connecting social accounts
  • I have not had enough time to share the platform with my colleagues to review
  • Our IT team are still reviewing the platform
  • Our Records / information management team need more time to evaluate the platform
  • Other — which adds a Tell us more box

  then click Send request. Leaving the reason unset says "Please choose a reason."; choosing Other with an empty box says "Please tell us a little more." On success the form is replaced by "Your request has been forwarded to our team. They'll be in contact shortly."

Talk to our team likewise changes to a thank-you once sent. If either request cannot be sent, a message beneath the button says so and you can try again. Log out at the bottom ("Done for now?") signs you out. The page also shows the support address, support@brolly.com.au, if you would rather email.

Tips

Bookmark Brolly's address rather than a page inside it. Signing in always lands on Home. Old record links and most old page addresses still open the right place; one that shows Page not found needs re-saving — see Navigating Brolly.

Every sign-in, failed attempt and password reset is recorded in the organisation's Activity Log, with the IP address and location it came from.