Sign in, SSO, and API keys
Sign-in options
At portal.agenstra.com you typically use:
- Portal users (email and password managed in-product)
- Keycloak SSO when your organization enables it
- API keys for automation (not for interactive browser sessions)
Common tasks
1. Open the portal and choose the login method your org uses.
2. If SSO fails, confirm you are on the correct organization IdP and that your user is provisioned.
3. For password resets, use the portal reset flow. Do not email passwords to Support.
4. Create API keys only in the account or org settings that list them. Store keys in your secret manager.
Safe handling
- Never paste API keys, SSO client secrets, or session cookies into tickets or chat.
- Rotate a key if it may have been exposed, then update clients.
- Use placeholders such as YOUR_API_KEY in examples and screenshots.
OpenAPI and auth details: docs.agenstra.com under /spec/... and the auth sections of the docs.