Sign in with Google or GitHub

When your workspace has it turned on, the sign in page shows Continue with Google and Continue with GitHub under the password form. They sign you in to the user you already have. They never create one: a person with no user in the workspace is told so and stays out.

Your password keeps working. So does two-factor login. If you turned it on, you still enter your code after Google or GitHub has identified you. If your workspace requires two-factor login for everyone, that applies here too.

Link your account

1. Open your avatar (top right), then Profile Settings, then Security.
2. Under Sign-in methods, choose Link next to Google or GitHub.
3. Enter your password when asked (a user with no password skips this), then sign in at Google or GitHub.

You land back on the page you were on, with a note that the account is linked. Next time, choose Continue with Google or Continue with GitHub on the sign in page.

You can link one Google account and one GitHub account to your user. They do not need the same address as your work login. An account belongs to one user only: if it is already linked to someone else in the workspace, you are told.

The first time, without linking

If you choose Continue with Google or GitHub before you have linked anything, the workspace links the account for you when the provider confirms an address that equals your login or your email. That needs three things: the provider has verified the address, it matches exactly one active user in the workspace, and the setting Link by verified address is on. Otherwise you see:

This Google account is not linked to a user here. Sign in with your password and link it in your settings.

Portal users and archived users never sign in this way.

Unlink

Choose Unlink next to the method and confirm. If it is your only way in because your account has no password, you are warned first. You can always get back in: on the sign in page, choose Reset password and we email you a link.

With Link by verified address on, choosing Continue with the same account again links it again. An administrator can turn that setting off.

What the workspace keeps

For each link: the provider, an identifier the provider gave us, the address and name it gave, and when you last used it. Never a password and never a token. The access token the provider hands over is used once to read who you are, then dropped, and a GitHub one is also revoked. Your permission for EVERJUST.APP stays listed in your Google or GitHub account, where you can remove it at any time.

For administrators

Settings → General Settings → Sign-in methods has four switches: sign in with Google or GitHub for the whole workspace, Google, GitHub, and Link by verified address. Under them you see who linked what: the address, the name and the last use, and no secret, because none is stored.

When someone leaves or an account is compromised, a user manager removes a link under Settings → Users & Companies → Linked sign-ins. Archiving a user stops their sign in with a linked account too.

The buttons appear only once EVERJUST.APP's Google and GitHub sign in is set up for the platform. If you do not see them, ask support.