Account Setup & Users
Overview
SageScreen supports email and password authentication and social login through third-party providers. Once registered, users belong to a council (your organization's workspace) and are assigned a role that determines their capabilities. Team management is handled through invitation flows that differ depending on whether the person being invited is new to SageScreen or already has an account.
Registration
New users register by providing a first name, last name, email address, username, and password. Passwords must be at least eight characters. After registration, you are logged in immediately and directed to your dashboard.
Alternatively, you can register using social login through Google, Facebook, or LinkedIn. Social login creates your account using the identity provider's credentials; no separate password is required.
If you registered through a purchase flow (Stripe checkout), your council and credits are provisioned automatically as part of the process.
Signing In
Two authentication methods are available:
- Email and password: enter your username or email address and your password on the login page.
- Social login: click the Google, Facebook, or LinkedIn button to authenticate through your existing account with that provider.
Social login users do not need a SageScreen-specific password. If your account was created through social login, you sign in using the same provider each time.
Password Reset
If you forget your password, request a reset from the login page. Enter your email address, and if an account exists, a reset link is sent to that address. The link directs you to a form where you set a new password (minimum eight characters). After resetting, you are redirected to the login page.
If your account was created through Google, Facebook, or LinkedIn, you do not have a SageScreen password to reset. Requesting a password reset on a social login account sends an email explaining that your account uses social login and directing you to sign in through your provider. No reset link is generated.
Logged-in users can change their password from their account page. Password changes require email verification: a confirmation link is sent to your email, and the new password takes effect after you click the link.
Inviting Team Members
Council Admins and Council Power Users can invite others to their council. There are two invitation flows depending on whether the invitee already has a SageScreen account.
Inviting a New User
When you invite someone who does not have a SageScreen account:
Inviting an Existing User
When you invite someone who already has a SageScreen account to join your council:
Roles at a Glance
When inviting a team member, you assign one of three council roles:
Council Power Users cannot edit or remove users who hold the Council Admin role, preventing privilege escalation within the team.
Multi-Council Membership
A user can belong to more than one council. This is common for consultants, agencies, or individuals who work across multiple organizations. Each council operates as an independent workspace with its own sages, screens, candidates, and billing.
When you belong to multiple councils, you see one council's data at a time. Switching between councils changes the active context: every list, detail page, and dashboard reflects the selected council. Your role may differ between councils (for example, Council Admin in one and Council Member in another).
Multi-council membership is established through the invitation flow. An existing user receives a council invitation, accepts it, and the new council is added alongside their existing membership.
Account Security
SageScreen applies several measures to protect your account:
- CAPTCHA verification on login, registration, and password reset forms to prevent automated attacks.
- Generic error messages on login failure and password reset to prevent user enumeration. The system does not confirm whether a specific email address has an account.
- Nonce verification on all form submissions to protect against cross-site request forgery.
- Email verification for sensitive changes like password updates and email address changes.