Sign-in and authentication
Sign in with Google, a one time email link, or an email and password. Email links work once, only for their address, and expire after an hour. MFA and SAML SSO aren't available yet.
On this page
Accounts are handled by Supabase Auth, reached through our own domain, auth.sopcompass.com.
Ways to sign in
Click Continue with Google and pick an account. SOPCompass asks Google only to identify you (your name and email address). It doesn’t request access to your Gmail, Drive or Calendar. Google shows an account chooser every time, so the right account is picked on shared computers.
Email link
Enter your email and SOPCompass sends a one time sign-in link. The link:
- works once,
- works only for the email address it was sent to, and
- expires after one hour.
Invitation, confirmation and password reset emails follow the same rules: one use, one hour.
Email and password
Set a password when you accept an invitation, or later with Forgot password. Passwords must be at least 8 characters. They are hashed and checked by Supabase Auth, and SOPCompass never sees a stored password. Password reset links work once and expire after an hour.
Sessions
After you sign in, your browser keeps a Supabase session so you stay signed in. Every request the app makes carries that session, and the database checks it against row-level security on every query. Signing out ends the session in that browser.
Invitations
A workspace invite is a pending membership tied to an email address. When someone signs up or signs in with that address, the invite becomes a membership automatically. An invite can’t be used by a different email address.
The capture extension
The Chrome extension never sees your password or your SOPCompass session. You approve it inside the app, which gives it a separate token that expires after 8 hours and can be revoked. See Capture extension privacy.
Not available yet
- Multi-factor authentication inside SOPCompass. With Google sign-in, your Google account’s 2-step verification applies.
- SAML, Okta or Azure AD single sign-on.
- SCIM user provisioning.
- Enforcing one sign-in method for a workspace, or an IP allow list.
Note: For the strongest sign-in today, use Google with 2-step verification turned on for your Google account.
Common questions
Does SOPCompass support multi-factor authentication?
Not in SOPCompass itself today. If you sign in with Google, any 2-step verification on your Google account applies to that sign-in.
Does SOPCompass support SAML or Okta SSO?
No. Google sign-in is the only single sign-on option today.
How long does a sign-in link last?
One hour. It works once, and only for the email address it was sent to.