Skip to main content

Your First Login

When your administrator provisions your user account, you receive an email with a one-time invite link. This page walks you through what happens on that first login.

Click the Activate your account button in the invite email. The link is valid for 72 hours. If it expires, ask your admin to re-send it from Admin → Users → Resend invite.

The link lands on a setup page where you will set your password and optionally enrol in MFA.

2. Set your password​

Passwords must meet the following minimums:

  • At least 12 characters.
  • At least one uppercase letter, one lowercase letter, one digit, and one symbol.
  • Cannot be a previously breached password (ORKSTRA checks against the Have I Been Pwned k-anonymity API).

You will be required to rotate your password every 180 days. The previous 6 passwords cannot be re-used.

If your tenant policy requires MFA, you cannot skip this step.

  1. Open your authenticator app (Authy, Google Authenticator, 1Password, etc.).
  2. Scan the QR code on screen.
  3. Enter the 6-digit code from your authenticator to confirm enrolment.
  4. Save the recovery codes shown on the confirmation screen — you will need them if you lose your device.

4. Choose language and timezone​

  • Language: English or Arabic. The interface switches immediately.
  • Timezone: defaults to Asia/Dubai. Choose your local timezone if different.
  • Date format: Gregorian (default) or Hijri.

You can change all of these later from the user menu at the top-right.

5. Tour the dashboard​

After login, you land on your role-specific dashboard:

  • Project managers see a portfolio summary, recent approvals, and overdue tasks.
  • Finance users see open IPCs, variations awaiting approval, and the cash position.
  • HSE officers see open incidents, expiring permits, and outstanding observations.
  • Admins see tenant health, user activity, and billing status.

Each card on the dashboard is a deep link into the underlying module — click any card to drill in.

What if I get locked out?​

After 5 failed login attempts your account is locked for 15 minutes. After 10 failed attempts the account is locked until an administrator resets it.

If you lose your MFA device:

  1. Try a recovery code from the set you saved at enrolment.
  2. If you don't have a recovery code, contact your tenant administrator. Admins can reset MFA from Admin → Users → [user] → Reset MFA.
  3. If you are the only administrator, contact support@orkstra.com with proof of ownership.