Before you start
For your first sign-in, you need:
An invitation to a company in Candis
Access to the email address that received the invitation
A current web browser
Any invited user can complete the registration. Your assigned role determines which areas and functions you can access after signing in.
Note: If your company uses single sign-on, follow the sign-in method configured by your company. You may not need to create a separate Candis password.
Accept your invitation and complete the registration
Open the inbox of the email address that received the Candis invitation.
Look for an invitation from
no-reply@candis.io.Check your spam folder if you cannot find the invitation.
Select Accept invitation in the invitation email.
Choose the sign-in method configured for your account:
Create a Candis password if you will sign in with your email address and password.
Sign in through your company’s single sign-on provider if your company uses SSO.
Complete the registration.
Complete the two-factor authentication if Candis asks you to verify your first sign-in.
Note: The invitation only works with the email address that received it. Ask an admin to send a new invitation if you need to use a different email address.
Create a secure password
Your Candis password must contain at least 12 characters. Candis shows any additional password requirements directly when you create or change your password.
Use a unique password that you do not use for other applications or accounts.
Tip: Use a password manager to generate and store a long, unique password. A password manager helps you avoid failed sign-in attempts caused by an outdated or incorrectly entered password.
Sign in with your email address and password
Open my.candis.io in your web browser.
Enter the email address linked to your Candis account.
Enter your Candis password.
Complete the two-factor authentication with one of the methods available for your account.
Select the relevant company if your Candis account belongs to more than one company.
Tip: Save the address of the company you use regularly as a browser bookmark.
Sign in with single sign-on
Single sign-on, or SSO, lets you access Candis through your company’s central identity provider. The identity provider manages your login credentials and may require its own additional authentication step.
To sign in with SSO:
Open my.candis.io in your web browser.
Enter your business email address or select the SSO option shown on the sign-in page.
Candis redirects you to your company’s identity provider.
Enter the login credentials for your identity provider.
Complete any additional security check required by your identity provider.
Candis opens your account after the identity provider confirms your identity.
Note: Candis does not ask for a separate Candis two-factor authentication when you sign in through SSO. Your identity provider manages the authentication process.
Reset your password
Reset your Candis password if you no longer know it:
Open my.candis.io in your web browser.
Select Forgot password.
Enter the email address linked to your Candis account.
Open the password reset email from Candis.
Select the password reset link in the email.
Create a new password that meets the displayed password requirements.
Sign in to Candis with your new password.
Tip: Check your spam folder if you do not receive the password reset email. Also check that you entered the email address linked to your Candis account.
Note: If you use SSO, reset your password through your company’s identity provider. The Forgot password function in Candis does not change your SSO password.
Protection against repeated failed sign-in attempts
Candis limits repeated failed sign-in attempts to protect your account from unauthorised access.
You have five sign-in attempts without a waiting period. Starting with the sixth failed attempt, Candis applies the following waiting periods:
Failed sign-in attempt | Waiting period before the next attempt |
1 to 5 | No waiting period |
6 | 60 seconds |
7 | 120 seconds |
8 | 180 seconds |
9 | 240 seconds |
10 and every subsequent attempt | 300 seconds |
After the waiting period ends, you have one more sign-in attempt. If the next attempt also fails, Candis increases the waiting period by another 60 seconds. The maximum waiting period is 300 seconds.
Candis resets the failed-attempt counter to 0 in either of the following situations:
You sign in successfully.
30 minutes pass without another failed sign-in attempt.
Note: Wait until the displayed waiting period ends before you try to sign in again.
Tip: Select Forgot password if you are no longer certain which password is correct. Resetting your password helps you avoid further failed sign-in attempts.