Signing in to FlexGalaxy¶
DotID is the identity service for the FlexGalaxy.AI platform. It controls how you sign in, which accounts you belong to, and what you can do once you arrive. This page explains the sign-in flow you will encounter and which entry point to pick.
Which login do I use?¶
FlexGalaxy.AI has three distinct sign-in entry points. Each one lands you in a different place and is meant for a different audience. Pick the one that matches your role.
Workforce login — the common case¶
URL: https://auth.flexgalaxy.ai/console
Use this if you are an employee, contractor, or operator who works inside one or more FlexGalaxy customer accounts. After signing in you will arrive at https://console.flexgalaxy.ai/startpoint, the account picker that lets you choose which of your accounts to enter.
The vast majority of human users sign in here.
Account root login¶
URL: https://auth.flexgalaxy.ai/root
Use this if you are the owner of a FlexGalaxy account and need to manage account-level settings (billing, account-wide policy, root credentials). After signing in you land at https://console.flexgalaxy.ai/ (DartBoard at host root), where account administration is available as a DartBoard tile.
Root login is for account owners only. Day-to-day work should still go through the workforce login.
Platform admin login¶
URL: https://auth.flexgalaxy.ai/admin-console
Reserved for FlexGalaxy.AI operators. If you are not a FlexGalaxy employee, you do not have access here. After signing in you land at https://admin-console.flexgalaxy.ai/stargate, the platform-operations console.
If you reached the admin-console login URL by accident, use the workforce login instead.
Picking your account¶
When you sign in through the workforce entry point you will see two screens in sequence:
PassPort — the credential screen. Enter your email address, then your password. If your account requires MFA you will be asked for your second factor here.
StartPoint — the account picker. If you belong to more than one account, StartPoint shows the list and lets you choose. If you belong to exactly one account, StartPoint forwards you straight through.
PassPort handles your credentials; StartPoint handles where you go next. The two are kept separate so that switching accounts later (from inside the platform) does not force you to re-enter your password.
MFA at sign-in¶
Most accounts require multi-factor authentication for human users. After PassPort accepts your password you will be prompted to present your second factor (a hardware security key or a code from an authenticator app). See MFA setup for how to enroll and manage your factors.
If you have lost your MFA device, see account recovery.
Troubleshooting¶
“Wrong realm” or “no account found” You signed in through the wrong entry point. Workforce users sign in via https://auth.flexgalaxy.ai/console; account owners use https://auth.flexgalaxy.ai/root. Verify the URL, and check that the email address you entered belongs to an account on this platform.
Your session expired Sessions last around 8 hours by default. If you have been idle longer than that, you will be sent back to PassPort to sign in again. This is normal.
MFA device unavailable Use your backup factor (TOTP code from your authenticator app) if you registered one. If you have lost all factors, see account recovery.
Stuck on PassPort after entering your password Clear cookies for https://auth.flexgalaxy.ai and try again. If the problem persists, the password is likely incorrect — use the “Forgot password” link on PassPort to reset it.