Administration
Signing in
Sign in to CORA with an emailed code, a password, or a connected provider such as Microsoft, and accept invitations with the right address.
CORA uses your work email as your identity. The same account can belong to several workspaces, and your role is set separately in each one.
Sign in with an emailed code
This is the default way in.
- Open the CORA sign-in page and enter your Work email.
- Choose Email me a sign-in code.
- Enter the 8-digit code from the email.
If the code does not arrive, wait for the timer and choose Send a new code. The first time you sign in with an email code, CORA creates your account.
Sign in with a password
If your account has a password, choose Use a password instead, enter it, and sign in. To go back, choose Email me a code instead. An unknown address and a wrong password give the same message, so the sign-in page never reveals which email addresses have an account.
Sign in with a provider
Under Or continue with, the sign-in page shows the providers that are currently switched on for CORA, such as Microsoft or Discord. Choosing one sends you to that provider to confirm who you are, then back to CORA. Only providers that are switched on appear, so you never see a button that does not work.
Invitations and company domains
An invitation works only for the email address it was sent to. Sign in with that same address to accept it. If your company has verified its email domain and turned on automatic joining, signing in with an address at that domain adds you to the workspace as a member. See Members and roles for how owners and admins set this up.
Signing out
Open the account menu in the lower left and choose Log out.
Keeping access safe
- Use your work email so that access ends when your company removes you from the workspace.
- Owners and admins remove people from Settings -> People & access. Queued work checks current membership again before it runs, so a removed person's access does not continue through work started earlier.
- If someone who joined through the company domain is removed, they cannot rejoin automatically until an owner or admin restores them.
Last updated 12 October 2026