Access Support

Sign-in problems

1. Start at Attest sign-in and enter the work email associated with your account.
2. If Attest routes you to company SSO, complete sign-in with that organization’s identity provider.
3. If password sign-in is offered, use the password-reset link on the sign-in page if needed.
4. Confirm that your browser allows secure cookies for the Attest hostname and that the device clock is accurate.
5. If access is denied after successful authentication, ask an Attest administrator for your organization to review your account and role.

SSO and organization discovery

Use your work email rather than a personal address. Attest uses the email domain and organization configuration to select the appropriate SAML, OIDC, or password flow. If your organization appears but SSO is not ready, contact the organization’s Attest administrator. If the wrong organization appears, stop and contact support before continuing.

Onboarding and verification codes

• Verification codes are sent to the work email entered during onboarding and expire after a limited period.
• Check spam or quarantine folders and confirm that the email address was entered correctly.
• Request a new code if the previous code expired; use only the most recently issued code.
• Free or disposable email domains may not be eligible for organization onboarding.
• Do not forward a verification code or send it to support.

Assigned policy, training, or assessment links

Open the newest link provided by your organization and sign in with the same work identity to which the request was assigned. If the request is unavailable, it may have expired, been replaced, or been assigned to another address. Ask the campaign administrator to confirm the recipient and current campaign state.

What to include in a support request

• Your name, work email, and organization.
• The page URL and approximate time the problem occurred.
• The request ID or client-safe error message shown on screen.
• Your browser and operating system.
• The step that failed and what you expected to happen.

Do not send passwords, verification codes, private keys, identity-provider secrets, or confidential assessment responses.