Signing in, MFA and session expiry

Sign-in goes through Naveera's identity service using your work email address and password. If your organization has single sign-on configured, use the SSO route instead — your password is then managed by your own identity provider, not by Naveera.

Enrolling in multi-factor authentication

1. 01Open Settings and choose Security.
2. 02Start MFA enrolment. A QR code is shown once.
3. 03Scan it with an authenticator app that supports time-based one-time passwords.
4. 04Enter the six-digit code the app generates to confirm the pairing.
5. 05Store the recovery codes somewhere you can reach without your phone.

Once enrolled, you are challenged for a code after your password. You can mark a device as remembered so the challenge is skipped on that browser for a period set by your administrator.

Why you were signed out

Access tokens are short-lived and refreshed silently while you are working. A refresh only fails if you have been idle beyond the limit, an administrator has ended your sessions, or your role or organization membership changed — in which case you are returned to sign-in so the new permissions load cleanly rather than being applied to a half-stale session.