Security, SSO & Sign In

Password and Authentication

Password and Authentication tab provides security controls for your account access, including password management and two-factor authentication setup.

Password Management

Change password:

• Click the Change password button to update your login credentials.
• You'll be prompted to enter your current password for verification.
• Then enter and confirm your new password.

If you forget your password:

• Use the Forgot password? link on the login page.
• Password reset link sent to your registered email address.
• Link expires after 24 hours for security.

Two-Factor authentication (2FA)

Two-factor authentication adds an additional security layer to your account by requiring a second verification method beyond your password. This significantly reduces the risk of unauthorized access even if your password is compromised.

What is 2FA?

Definition: Two-factor authentication requires two separate forms of identification to access your account:

1. Something you know: Your password.
2. Something you have: A time-based one-time password (TOTP) generated by an authenticator app.

How It Works

Authenticator apps like 1Password, Authy, Microsoft Authenticator, or Google Authenticator generate one-time passwords that refresh every 30 seconds. These apps use industry-standard TOTP (Time-based One-Time Password) protocols.

When 2FA is enabled:

1. Enter your username and password on the login page.
2. System prompts for your 6-digit authentication code.
3. Open your authenticator app and retrieve the current code.
4. Enter the code within 30 seconds (before it refreshes).
5. Access granted to your Hubtype account.

Setting Up 2FA

Prerequisites:

• Install an authenticator app on your mobile device or computer.
• Recommended apps: 1Password, Authy, Microsoft Authenticator, Google Authenticator.
• Ensure your device's date and time are set automatically (required for TOTP synchronization).

Activation steps:

1. Click Activate button in the Two-factor authentication section

2. Scan QR code with your authenticator app:

• Open your authenticator app
• Select Add account or Scan QR code.
• Point your camera at the displayed QR code.
• The app will automatically add your Hubtype account.

3. Manual entry alternative (if QR scan fails):
Click Can't scan QR code? or Enter code manually.

• Copy the provided secret key.
• Manually add account in authenticator app.
• Paste the secret key when prompted.

4. Verify setup:

• Enter the 6-digit code currently displayed in your authenticator app.
• Click Verify or Confirm.
• System confirms successful 2FA activation.

5. Save backup codes (if provided):

• Download or write down emergency backup codes.
• Store securely—these allow account access if you lose your device.
• Each code typically works once.

Using 2FA Daily

Login process with 2FA enabled:

1. Navigate to Hubtype login page.
2. Enter your username/email and password.
3. Click Sign in.
4. Enter current 6-digit code from authenticator app
5. Submit to access your account.

Code timing:

• Codes refresh every 30 seconds.
• Wait for new code if timer is nearly expired.
• System accepts codes for brief window (usually ~30-60 seconds).

Managing 2FA

Changing devices:

• Remove old device authentication before switching devices.
• Set up 2FA again on new device using QR code or secret key.

Lost device recovery:

• Use backup codes if you saved them during setup.
• Contact your organization administrator for 2FA reset.
• Administrators can disable 2FA temporarily for account recovery.

Disabling 2FA:

• Only organization administrators can disable 2FA requirement.
• Not recommended—significantly reduces account security.
• May be required by organization security policies.

Benefits of 2FA

Security advantages:

• Protects against password theft—stolen passwords alone can't access account.
• Prevents unauthorized access from compromised credentials.
• Adds protection when using public or shared computers.
• Mitigates phishing attack risks.
• Industry standard for securing business applications.

Compliance:

• Many security frameworks require 2FA (SOC 2, ISO 27001).
• Meets data protection regulations for customer information access.
• Demonstrates security best practices to clients.

Troubleshooting 2FA

"Invalid code" errors:

• Ensure device date/time set to automatic (TOTP requires sync).
• Wait for next code refresh if timer nearly expired.
• Verify you're entering code from correct account in authenticator app.
• Check for multiple Hubtype accounts in authenticator.

Lost authenticator app access:

• Use backup codes if available.
• Contact organization administrator for 2FA reset.
• Admin can temporarily disable 2FA for re-enrollment.

Time synchronization issues:

• Go to device Settings > Date & Time.
• Enable Set automatically or Automatic date & time.
• May need to manually sync time in authenticator app settings.

Single Sign-On (SSO)

Note: This feature requires administrator configuration and may incur additional costs.

What is SSO?

Single Sign-On (SSO) allows organizations to integrate Hubtype authentication with their existing identity management system. Users can access Hubtype using their corporate credentials without creating separate passwords.

SSO Benefits

For users:

• One set of credentials for all company applications.
• Faster login—automatically authenticated if already logged into corporate systems.
• No separate password to remember or manage.
• Password policies enforced at organizational level.

For organizations:

• Centralized user access control.
• Immediate access revocation when employees leave.
• Enhanced security through corporate identity provider.
• Audit trail of all authentication attempts.
• Reduced password reset support requests.

Requirements

Technical prerequisites:

• Identity provider must support SAML 2.0 protocol.
• Organizations using: Okta, Azure AD, Google Workspace, OneLogin, or similar.
• Technical resources to configure identity provider settings.
• SSL certificates and metadata exchange with Hubtype.

Organizational requirements:

• SSO feature must be enabled for your Hubtype organization (additional cost may apply).
• Initial setup requires coordination between your IT team and Hubtype technical support.

Setup Process

Detailed technical documentation provided during setup process by Hubtype technical team.

SSO and 2FA

SSO can be combined with two-factor authentication for enhanced security:

• 2FA may be enforced at identity provider level (recommended).
• Or configured separately within Hubtype.
• Check with your organization's security team for specific requirements.

Account / Organization Creation

Organization Sign-Up Process

New organization accounts are typically created through:

• Direct sales engagement with Hubtype team.
• Self-service sign-up (if available for your region).

Initial setup includes:

• Organization name and configuration.
• Primary administrator account creation.
• Feature flags activation based on subscription tier.
• Integration setup (WhatsApp Business API, etc.).

Feature Flags

Feature Flags control which capabilities are available to your organization.

Contact your Hubtype account manager to understand which features can be enabled to your organization.

Sign in

How you log in to Hubtype with your credentials.

Introduction

The Sign-in allows you to securely access your Hubtype account. By entering your email address and password, you authenticate yourself and gain access to the platform.

• Purpose: Protects accounts by ensuring only authorized people can log in.
  
• Value: Provides a simple, familiar, and secure way for you to access Hubtype.
  
• Scope: Part of Hubtype’s authentication system, which also includes account creation, password recovery, and session management.
  

Step-by-step Walkthrough

Standard Sign-In

1. Open Hubtype in your browser: https://app.hubtype.com/sign-in
   
2. Enter your email address in the email field.
   
3. Enter your password in the password field.
   
4. Click on the Sign in button.
   
5. If your credentials are correct, you’ll be redirected to your Hubtype dashboard.
   

Forgot Password (Recovery)

1. On the Sign-in page, click Forgot Password?
   
2. Enter your registered email address.
   
3. Check your inbox for the password reset email.
   
4. Click the link in the email to open the reset page.
   
5. Enter a new password and confirm it.
   
6. Return to the Sign-In page and log in with your new password.

Pre-conditions

• You already have a Hubtype account.
  
• You know your registered email address and password (or have access to your email to reset it).
  

Post-conditions

• If successful: You’re authenticated and logged into your account.
  
• If unsuccessful: You’ll see an error message asking you to re-enter your credentials or reset your password.
  

Last updated: November 2025