FlexGalaxy.AI FG.AI | DotID Help
Index Search
v1.0.0
English 简体中文 日本語
  • Creating an account
  • Signing in to FlexGalaxy
    • Which login do I use?
      • Workforce login — the common case
      • Account root login
      • Platform admin login
    • Picking your account
    • MFA at sign-in
    • Troubleshooting
  • Basic concepts
    • Account
    • Organization
    • Management Account
    • Identity Center
    • Profile
    • Service user
    • Workload identity
    • FGAI CLI
    • MFA and Passkeys
    • QuotaCenter
    • TraceBook
    • PassPort
  • Using DotID apps
    • Account console apps
    • Platform admin console apps
    • Troubleshooting app workflows
  • Opening an application link
    • Link shapes
    • What you see when you open a link
      • When a link has no organization
    • If you cannot open the application
  • Where to manage each identity
    • Workforce administration
    • Programmatic administration
    • Personal security
  • Accounts that activate when you use them
    • What the statuses mean
    • How a pending account becomes active
    • Where to check an account’s status
    • Retiring a location
    • “Opening the app took me to a setup page”
    • Still stuck?
  • Managing your credentials
    • Passwords
    • Multi-factor authentication (MFA)
    • Programmatic access
    • Signing out of all sessions
    • See also
  • Service users — API access for tools and scripts your account owns
    • Which credential to pick
    • What a service user is
    • Creating a service user
    • Creating an access key for a service user
    • Using service-user keys from the CLI
    • Rotating an access key
    • Revoking and deleting a service user
    • Why service users can’t sign in
    • Service users vs workforce CLI sessions
    • Service users vs workload identities
    • Where service-user actions show up
    • See also
  • Multi-factor authentication
    • Which policy applies
    • Enrolling a factor
      • Authenticator app
      • WebAuthn
    • Lost or replaced MFA device
    • FAQ
  • Recovering access to your account
    • Forgot password
    • Lost MFA device
    • Locked out as the only root user
    • I need to recover an account I am administering
    • Operators
  • Home
  • Opening an application link

Opening an application link¶

Some FlexGalaxy.AI applications live outside the console. When your organization gives you access to one, it sends you a link — for example by email or in chat. The link always starts at PassPort (https://passport.flexgalaxy.ai): you sign in there, and PassPort sends you on to the application for your organization.

Link shapes¶

Application links come in two shapes:

Shape

What it does

/app-entry/<app-id>/<org-id>

Opens the application for one specific organization. The organization is fixed in the link — you always land in that organization’s copy of the application.

/app-entry/<app-id>

Opens the application without pinning an organization. PassPort sends you straight through when you belong to exactly one organization, or asks you to choose when you belong to several.

Both shapes live under https://passport.flexgalaxy.ai — for example, a full link carries the path /app-entry/<app-id>/<org-id>.

<app-id> identifies the application and <org-id> identifies the organization. These are platform identifiers assigned to the application and to your organization — do not hand-edit a link. If you need one, ask the application or your organization’s administrator for the exact link.

What you see when you open a link¶

  1. Sign in. If you are not signed in yet, PassPort shows your organization’s sign-in screen.

  2. Opening the application… PassPort checks your entry, then sends you to the application.

  3. You land in the application for the organization named in the link (or, for a link without an organization, for the organization you chose).

When a link has no organization¶

PassPort decides what to do from the organizations you can enter this application through:

  • Exactly one organization — PassPort does not show a chooser; it sends you straight into that organization.

  • Several organizations — PassPort shows Choose an organization: “Select the organization to enter this application through.” The list shows only organizations you can enter the application through.

  • No usable session — PassPort shows “Open this application from the link your organization sent you.” Reopen the original link when you can sign in.

If you cannot open the application¶

PassPort shows one of these messages instead of opening the application:

  • “You cannot enter this application for the requested organization.” — The link names an organization you cannot enter the application through. This happens when you do not belong to that organization, the organization cannot use the application (for example, it has been closed), or your access to the application has not been set up yet.

  • “You have no organization you can enter this application through.” — The link has no organization, and none of the organizations you belong to can use the application.

  • “The destination could not be verified. Start again from a trusted FlexGalaxy.AI page.” — PassPort could not complete the entry, for example because the link is malformed or is no longer usable. Choose Try again, or start again from a trusted FlexGalaxy.AI page.

If you cancelled the sign-in screen instead of finishing it, you will see the first message above — reopen the original link to try again.

What to do: verify with the person or organization that sent the link that you should have access to the application for that organization. Your administrator can confirm your membership and that the application is enabled for the organization.

Only enter your credentials on FlexGalaxy.AI sign-in pages. Application links always pass through https://passport.flexgalaxy.ai first — if a link takes you somewhere else, do not use it.

On this page

  • Opening an application link
    • Link shapes
    • What you see when you open a link
      • When a link has no organization
    • If you cannot open the application
← Previous Using DotID apps Next → Where to manage each identity
Built with Sphinx © 2026, FlexGalaxy.AI