Getting started
Welcome to Veridenti for Business. This guide takes you from your first sign-in to a fully provisioned team.
Your first sign-in
When your account is created, you receive a one-time sign-in link by email (single-use, valid for 72 hours). Click it to reach the admin console at enterprise.veridenti.com — no password needed. This link exists to break the "you need SSO to set up SSO" chicken-and-egg; after you connect SSO, everyone (including you) signs in through your identity provider.
On your first visit the console runs a short guided tour and shows a Getting Started checklist on the Overview that walks you through the steps below — each with a one-click action. You can replay the tour or bring the checklist back anytime from Settings → Onboarding & Help, and per-feature "Show me how" walkthroughs live in the Members, Roles & Policies, and Data Residency screens.
Recommended setup order
- Secure your own account — add a passkey and turn on two-factor under Settings → Session Security.
- Connect SSO (SAML or OIDC) so your team signs in with your identity provider — or invite members directly if you're not using SSO yet.
- Turn on SCIM so users and groups provision automatically — or create manual groups under Members if you don't run a directory.
- Set your security policies and per-feature governance.
- Choose your data residency — set org, group, or per-user default regions.
- Create shared vaults for the teams that need them.
- Review your security posture and the human-risk dashboard.
What Veridenti is (and isn't)
Veridenti is zero-knowledge: your vault contents are encrypted on each device and the server only ever holds ciphertext it cannot read. That shapes everything — including recovery, residency, and what support can (and cannot) see. It is not a place where an admin can read employees' passwords; the design makes that impossible by construction.