Docs
Overview
This section covers the first login for every user and the forced setup of two-factor authentication (2FA) with an authenticator app. 2FA is required for every login to a Teluul org, with no bypass.
We require it for two main reasons:
- It lowers litigation risk (customer lawsuits), because data leaks and hacks through the front door become less likely.
- We plan to get an annual SOC2 certification, which requires 2FA.
What "first login" means
First login is the first time you sign in the normal way — with your username and password — on your workspace.
If you created the organization (Super Administrator)
- You signed up at teluul.com/signup/.
- Teluul opened your new workspace right away. That first visit is not counted as a normal login.
- When you log out, then sign back in with your username and password — that is your first login.
- On that login, Teluul will ask you to finish security setup (including 2FA), just like other users.
If you were invited by someone
- You got invite emails from support@teluul.com (workspace details, temp password, and email confirm). See Invite User.
- Open your workspace link (your org subdomain) and sign in with the username and temp password from the emails.
- Teluul then walks you through setup before you can use the workspace.
What you need to finish (invited users)
When someone invites you, they only enter your email and role. Teluul creates your username and a temporary password for you.
On first sign-in you must complete these steps (you cannot skip them):
- Set up 2FA — connect an authenticator app (details on Forced 2FA Setup)
- Change your temp password — pick your own password
- Enter your full name
- Choose your timezone
If you close the browser before finishing, the next time you try to sign in Teluul will bring you back to finish these steps. You will not see the main workspace until all four are done.
