Skip to content
Nowlark
Sign inGet the app
How it worksPricingDocsTeams
Get the appSign in
Support menu

Start

Support home

Guides

Send a notificationSchedule, repeat and escalateQuestions and receiptsSources, tones and your feedConnect your toolsTeams, roles and invitesChannels, escalation, webhooks and emailForms and spam protectionConsole, company sign‑in and SCIMAccount, keys and devices

Help

Contact

Console, company sign‑in and SCIM

Manage a team from a browser with a passkey, then connect your identity provider for company sign‑in and SCIM provisioning.

The console is where an admin manages a team from a browser, without needing the app on that machine.

AppSettings › Console
Your browsercreate a passkey
Signed inno password, ever
One link from your phone sets up a passkey on the browser you manage from.

Sign in with a passkey#

In the app open Settings › Console and open the link it gives you in the browser you will use. Choose Create a passkey. The link works once and lasts ten minutes. After that, that browser (or any device holding the passkey, including one synced by iCloud Keychain) signs in at /org/login with no username and no password.

  • Add more passkeys from /org/passkeys. The last one cannot be removed.
  • A session ends after two hours idle or eight hours in all.
  • Lost your phone? Replace your key in the app with the option to sign everything else out, and every console session and passkey is removed.
  • A console session can manage the team but cannot touch your account: it cannot read your keys, make new ones, buy a pass or delete your account.

What you can do there#

  • See the team, its members and their roles, and remove a member.
  • Make invite codes.
  • See each channel, who is on it, and turn everyone on or off.
  • Open each form's inbox, claim messages and export them.
  • See the plan, seats used and the paid-through date, and buy or change the plan.
  • Read the activity log.
  • Offer ownership to an admin, or accept it.
  • Set up company sign‑in and provisioning.
  • Delete the team.

Creating channels, changing roles, setting escalation, adding webhook and email destinations and creating forms are one request each: Teams and Channels show them.

Company sign‑in (Okta and other OpenID Connect providers)#

Employees sign in to the console with their company account, join the team, and get a role from their provider's groups.

Employeetypes the team name
Company loginyour identity provider
Consolerole from their group
Your directory stays the one place people are managed.

The owner enters the provider's address and client details, the email domains the team accepts, and which provider groups are admins and which are senders. Nowlark shows the redirect address to register at the provider. Owners are never created from groups, and removing someone from a group lowers their role at their next sign‑in. The email is checked once and not stored.

You can also require company sign‑in. Invite codes then stop adding people, and the console needs the company account. It can only be turned on after one company sign‑in has worked, and owners are exempt, so a wrong setting cannot lock a team out.

Automatic provisioning (SCIM 2.0)#

With provisioning on, your identity provider lists who belongs and the team follows.

Joins the companyProvider adds them. They can sign in.
Changes roleGroup changes. Their role follows at sign‑in.
Leaves the companyProvider deactivates them. They are removed at once.
Removal reaches their channels, keys, copies of team alerts and console sessions.

Point the provider at https://nowlark.com/scim/v2 with the bearer token the owner generates (shown once). Users can be created, updated, deactivated and deleted. The owner is never removed this way.

Audit and ownership#

The activity log records who changed what, newest first. It never records message text, keys or form content. Teams explains how ownership is handed over.

PreviousForms and spam protectionNextAccount, keys and devices