- Email and password: ION prompts you for your password. Enter it to sign in.
- Single sign-on (SSO): if SSO is configured for your email domain, ION redirects you to your identity provider (Okta, Microsoft Entra ID, Google Workspace, ADFS, or another SAML/OIDC provider) to authenticate there, then returns you to ION.
Sign in for the first time
If your organization uses SSO, your ION account is created automatically the first time you sign in through your identity provider. The very first person to sign in to a new ION organization becomes its administrator; every subsequent user is assigned the default User role. An admin can then grant additional roles. If you’re signing in with email and password for the first time, an administrator at your company sends you an invite email with a link to set your password.Troubleshooting
I’m told I’m not authorized to access the application. Verify that you’re signing in with the correct URL:app.firstresonance.io, app.ion-gov.com, or app.ion-aus.com (or the correct sandbox URL if applicable).
My company is new to ION and I can’t sign in for the first time.
Your ION environment might still be setting up. Wait 15 minutes and try again.
My account has been deactivated.
Contact an administrator at your company to reactivate your ION account.
I see a “You have no roles” error.
A required permission isn’t enabled for your role. An admin can grant it. See Create a role.
I need to reset my MFA and can’t access my authenticator device.
Contact support to reset it.