Operators sign in with a token or single sign-on. Agents use scoped bearer credentials — never this page.
Paste an operator secret (sto_…) to open the console. Tokens are minted once and never shown again — keep yours in a password manager.
No token yet? Pilots receive one at onboarding. Self-hosting? railpane bootstrap mints the first.
Enterprise workspaces sign in through their identity provider. SSO is configured per organization — if yours is enabled, start here.
Not configured for your workspace yet? SSO ships with pilot onboarding.
Railpane