Signing In
Optima Orbit uses email-and-password authentication with optional Single Sign-On
(SSO). Every user belongs to exactly one organization, and each organization
lives on its own subdomain (e.g. acme.optimaorbit.com).
Where to find it
Open your organization's subdomain or navigate to the platform domain and click Sign In. The login screen is the first thing a non-authenticated user sees.
Login methods
| Method | How it works |
|---|---|
| Email + Password | Enter your work email and password. A Cloudflare Turnstile captcha may appear for security. |
| SSO (Single Sign-On) | If your organization has SSO enabled, click the SSO button to authenticate through your identity provider. |
| Session resume | If you already have a valid session, the portal skips the login screen and takes you to your last-visited page. |
Login screen walkthrough
The login screen is split into two halves on desktop — a form on the left and a branded illustration on the right.
- Organization logo — If you're on a tenant subdomain, your organization's logo and name appear at the top. On the platform domain you see the Optima Orbit logo.
- Email field — Enter your registered email address.
- Password field — Enter your password. Click the eye icon to toggle visibility.
- Remember me — Check to keep your session active longer.
- Forgot password? — Opens the password-reset flow (see below).
- Sign In button — Submits the form. A loading spinner appears while the backend verifies credentials.
- Theme switcher — Top-right corner; switch between light and dark mode even before signing in.
Fields & validation
| Field | Required | Validation | Notes |
|---|---|---|---|
| Yes | Valid email format | Must match a registered user | |
| Password | Yes | Non-empty | Incorrect credentials show an error message |
| Turnstile | Conditional | Auto-verified | Only required on optimaorbit.com domains |
Password reset
- On the login screen, click Forgot password?
- Enter your email address and complete the security check.
- Click Send Reset Link — the system emails a one-time reset link.
- Open the email and click the link — it opens the Reset Password page.
- Enter your new password (the strength meter guides you toward a strong password) and confirm it.
- Click Reset Password to save. You are redirected to the login screen.
:::tip Password strength The password strength meter evaluates four criteria: length > 7 characters, uppercase letter, number, and special character. Aim for all four bars. :::
Post-login routing
After a successful login, the system determines where to send you:
| Scenario | Destination |
|---|---|
| You're on your organization's subdomain | Resume your last active page (or Cockpit) |
| You're on the platform domain and belong to an org | Redirect to <your-slug>.optimaorbit.com via SSO handoff |
| You're a Super Admin with no org | Stay on the platform domain dashboard |
| You're on a different org's subdomain | Redirect to your own org's subdomain |
Self-serve signup
New organizations can sign up directly at /signup. The process creates a new
workspace with a 15-day free trial — no credit card required. After signup you
enter the First-Run Wizard to get oriented.
Signup is only available on the platform domain (optimaorbit.com), not on
tenant subdomains.
SSO callback
SSO authentication completes at /sso-callback. This page receives the
authentication token from your identity provider, stores it in the session, and
redirects you into the portal. You should never need to visit this URL manually.
FAQs & troubleshooting
Q: I see "Invalid credentials" but I'm sure my password is correct. A: Check that you're on the correct organization's subdomain. Each org has its own user database. Also verify caps lock is off.
Q: I'm stuck in a redirect loop after login.
A: Clear your browser's localStorage (specifically the optima-auth-storage key) and try again.
Q: The Turnstile captcha won't load. A: Turnstile requires a connection to Cloudflare. Check your network or ad-blocker settings. On custom domains, Turnstile is automatically disabled.