← All articles

One sign-in for TWN-hosted software

TWN manages an identity service so supported hosted software can use a work account, a Google account, or another approved sign-in without creating a new password for every app.

TWN operates its own sign-in platform at auth.twnstack.com. It gives supported TWN-hosted software a shared way to recognise a person and start a session. Depending on the application and the account setup, a person can sign in with their work account, Gmail, or another approved identity provider.

What the shared sign-in does

The identity service checks who you are and returns a trusted sign-in result to the application. The application then decides what you can see and do. This means a person does not need a separate password for every TWN-hosted tool, while each tool can keep its own roles and permissions.

  • One account path for supported TWN-hosted software
  • Work account and approved Google sign-in options where enabled
  • Central account disable and session control
  • A clearer place for sign-in policy and multi-factor checks
  • App-level permissions that still belong to each application

It does not merge all application data

Single sign-on is an identity link. It does not mean every application can read every other application's data. Access remains bounded by the app, the role, the organisation, and the permissions that were granted. A shared sign-in should make access easier to manage, not make boundaries disappear.

The work account should be the normal path

For a team, use the work identity that the organisation can manage. When someone leaves, access can be removed from the central account path and from the application. Personal sign-in can be useful for an approved individual service, but it should not become the only owner of a business system.

Good identity design still needs recovery

A central sign-in system becomes important infrastructure. Keep a recovery path for an unavailable provider, a lost second factor, a locked account, or an application that needs emergency access. Review who can administer the identity service. Keep audit records. Test the process before an outage makes the question urgent.

A useful next step

Talk to TWN about hosted software and access →

Sources