Skip to content

feat(account): added 1FA method #6645

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
firdevs-a wants to merge 6 commits into
base: main
Choose a base branch
from
Open

feat(account): added 1FA method #6645

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
face000
feat(account): added 1FA method
firdevs-a Jun 19, 2026
b3be395
Updated 1FA method
firdevs-a Jun 19, 2026
53dadc1
Updated MFA pages
firdevs-a Jun 26, 2026
5d2556f
Added troubleshooting page
firdevs-a Jun 29, 2026
d708da5
fixed typos
firdevs-a Jun 29, 2026
7bf881c
updates upon review
firdevs-a Jul 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
128 changes: 75 additions & 53 deletions pages/account/how-to/log-in-to-the-console.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,122 +1,144 @@
---
title: How to log in to the console
title: Log in to the console
description: Steps to log in to the Scaleway console.
tags: account login password access magic-link magic link authentication code SSO
dates:
validation: 2026-03-24
validation: 2026-06-26
posted: 2024-06-11
---
import LoginMember from '@macros/iam/login-member.mdx'
import Requirements from '@macros/iam/requirements.mdx'

import image from './assets/scaleway-auth-code.webp'

The Scaleway console supports several authentication methods, including email and password, one-time authentication codes, and Single Sign-On (SSO) via Google, GitHub, or SAML. The options available to you depend on your role within an Organization and the Organization configuration.
The Scaleway console supports several authentication methods. The options available depend on your role and your Organization's configuration.

An IAM user is a human user in an Organization. Identify which IAM user you are:
- **Owner**: You are the Owner of the Organization that was created with your account. You manage the root account and log in directly.
- **Member**: You are a Member when you are added to an Organization by an Owner or user with IAM Manager permissions. Members exist only within the specific Organizations in which they are created. They must identify their Organization ID before logging in.
**Identify your role before logging in:**

This page describes the different login methods available and what to consider based on your role.
- **Owner** - You created the account and are the Owner of your Organization. You log in directly to the [console](https://console.scaleway.com).
- **Member** - You were added to an Organization by an Owner or a user with IAM Manager permissions. You must identify your Organization ID before logging in.

<Requirements />

- A [Scaleway](https://www.scaleway.com/en/) account
- Know your IAM user type: Owner or Member

## Log in as an Organization Owner
## Log in as an Owner

1. Go to the [Scaleway console](https://account.scaleway.com/).
<Tabs>
<TabsTab label="Log in with SSO">
1. Click the **Google**, **Microsoft**, or **GitHub** logo for the account you want to use.
2. Complete the login on the respective SSO page.
3. If multifactor authentication (MFA) is enabled, enter the authentication code when prompted.
</TabsTab>
<TabsTab label="Authentication code">
Instead of a password, you can log in with a one-time code sent to your email address. The code can only be used once and expires after 10 minutes.
The console supports the following authentication methods for Owners:

- **Passkey** (if configured): either your browser detects your passkey automatically and prompts you to authenticate with it before asking for your email, or you click **Continue with your passkey**. If your passkey supports user verification, this single step satisfies both authentication factors.
- **Email and password**
Comment thread
firdevs-a marked this conversation as resolved.
- **One-time authentication code** (sent by email)
- **Single Sign-On (SSO)** via Google, GitHub, or SAML

1. Enter your email address and click **Send authentication code**.
A code will be sent to your email inbox.
2. Open the email with the subject **Use the authentication code to access your account** in your inbox.
3. Copy the code and enter it in the Scaleway console.
<Lightbox image={image} alt="" />
<Tabs>
<TabsTab label="Log in with SSO">
1. Go to the [Scaleway console](https://account.scaleway.com/).
2. Click the **Google**, **Microsoft**, or **GitHub** logo for the account you want to use.
3. Complete the login on the respective SSO page.
4. If multifactor authentication (MFA) is enabled, complete the additional verification step when prompted. This can be a one-time code from your authenticator app, or a passkey.
</TabsTab>
<TabsTab label="Passkey">
1. Go to the [Scaleway console](https://account.scaleway.com/).
2. If your browser detects a passkey for your account, you are automatically prompted to authenticate. Complete the verification step (for example, a fingerprint scan or PIN). If no passkey is detected automatically, click **Continue with your passkey** and follow the steps in your browser or OS prompt to complete verification.

Once the passkey is validated, you are redirected to the Organization dashboard.

You will be authenticated and redirected to the console.
<Message type="note">
If your passkey supports user verification (such as Touch ID on macOS or Windows Hello), this single step satisfies both authentication factors and you are logged in immediately — no password or TOTP code required. If your passkey does not support user verification, you are returned to the login form to continue with another method.
</Message>

If you configured a passkey but cannot connect with it, continue with another method and see [I cannot use my passkey as a passwordless login](/account/troubleshooting/cannot-use-passkey/).

</TabsTab>
<TabsTab label="Authentication code">
Instead of a password, you can log in with a one-time code sent to your email address. The code can only be used once and expires after 10 minutes.

1. Go to the [Scaleway console](https://account.scaleway.com/).
2. Enter your email address and click **Send authentication code**. You will receive a code on your email inbox.
3. Open the email with the subject **Use the authentication code to access your account**.
4. Copy the code and enter it in the Scaleway console.
<Lightbox image={image} alt="" />

You are authenticated and redirected to the console.

<Message type="note">
If you log out from the console and want to log in again without your password, you will need to request a new code by repeating the steps above.
If you log out from the console and want to log in again without your password, you need to request a new code by repeating the steps above.
</Message>
</TabsTab>
<TabsTab label="Password">
1. Click **Log in with password**.
2. Enter your email address and password, then click **Log in**.
3. If multifactor authentication (MFA) is activated, enter the authentication code when prompted.
</TabsTab>
</TabsTab>
<TabsTab label="Password">
1. Go to the [Scaleway console](https://account.scaleway.com/).
2. Click **Log in with password**.
3. Enter your email address and password, then click **Log in**.
4. If multifactor authentication (MFA) is enabled, complete the additional verification step when prompted. This can be a one-time code from your authenticator app, or a passkey.
</TabsTab>
</Tabs>

## Log in as an IAM Member
<Message type="note">
Even if MFA is not enabled on your account, Scaleway may ask you to confirm a one-time authentication code sent by email as an additional security check.
</Message>

## Log in as a Member

Adding you as an [IAM Member](/iam/concepts#member) to an Organization automatically creates a Scaleway account for you. An Organization administrator must provide you with a username, email address, and Organization ID (or a direct login link) for you to log in.
When an Organization administrator adds you as an [IAM member](/iam/concepts#member), a Scaleway account is automatically created for you. To log in, the administrator must provide you with your username, email address, and Organization ID, or a direct login link.

1. Go to the [Scaleway console](https://account.scaleway.com/).
2. Click [Log in as an IAM Member](https://account.scaleway.com/member-login).
3. Enter the Organization ID or alias, then click **Continue**.
<Message type="important">
If your Organization admin provided a [link to connect directly](/organizations-and-projects/how-to/set-organization-alias) to your Organization, you can disregard step 3.
<Message type="note">
If your Organization admin provided a [link to connect directly](/organizations-and-projects/how-to/set-organization-alias) to your Organization, disregard step 3.
</Message>
4. Enter your username.
5. Select an authentication method: **Log in with SSO**, **Send code**, or **Enter password**.
<Tabs>

<TabsTab label="Log in with SSO">
Scaleway supports Single Sign-On (SSO) for a streamlined login experience. By default, you can use your Google or GitHub account, provided the email address linked to your Scaleway account matches the one on your Google or GitHub account.
Scaleway supports Single Sign-On (SSO), letting you log in with your Google or GitHub account. Your SSO email address must match the one linked to your Scaleway account.

<Message type="important">
- If your Organization has [set up login via SAML](/iam/how-to/set-up-identity-federation), you must authenticate through your company's configured Identity Provider to log in with SSO.
</Message>
If your Organization has [set up login via SAML](/iam/how-to/set-up-identity-federation), you must authenticate through your company's configured Identity Provider to log in with SSO.

1. Click **Sign in with SSO** (for SAML), or click the **Google** or **GitHub** logo (for OAuth2).
2. Complete the login steps in the Identity Provider you are redirected to.
3. If multifactor authentication (MFA) is enabled, enter the authentication code when prompted.
3. If multifactor authentication (MFA) is enabled, complete the additional verification step when prompted. This can be a one-time code from your authenticator app, or a passkey.
</TabsTab>
<TabsTab label="Authentication code">
1. Click **Send code** to receive a login code in your email.
2. Enter the code you received by email.
2. Enter the code you receive by email.
<Message type="tip">
If you did not receive the email, try the following steps in order:
1. Check your spam folder.
2. Click **Resend email**.
3. Contact an Organization administrator to confirm your information was correctly registered.
4. If the issue persists, ask an administrator to [contact support](/account/how-to/open-a-support-ticket/#writing-an-effective-subject-and-description)
4. If the issue persists, ask an administrator to [contact Scaleway support](/account/how-to/open-a-support-ticket/#writing-an-effective-subject-and-description)
</Message>
3. Click **Continue**.
4. If multifactor authentication (MFA) is activated, enter the authentication code when prompted.
4. If multifactor authentication (MFA) is enabled, complete the additional verification step when prompted. This can be a one-time code from your authenticator app, or a passkey.
</TabsTab>
<TabsTab label="Password">
1. Click **Enter password**.
2. Enter your password, then click **Continue**.
3. If multifactor authentication (MFA) is activated, enter the authentication code when prompted.
3. If multifactor authentication (MFA) is enabled, complete the additional verification step when prompted. This can be a one-time code from your authenticator app, or a passkey.
</TabsTab>
</Tabs>

## Log in with MFA

If [Multifactor Authentication (MFA)](/account/how-to/use-2fa) is enabled on your account, you will be prompted for an additional verification step after you enter you credentials.
If [Multifactor Authentication (MFA)](/account/how-to/use-2fa) is enabled on your account, you will be prompted for an additional verification step after you enter your credentials.

Two methods are supported:
- **One-time password (TOTP)** - a unique, time-based validation code generated by an authenticator app
- **Passkey** - a passwordless authentication method that removes the need to create, manage, or remember passwords.
Scaleway supports two methods:
- **One-time password (TOTP)** - a unique, time-based code generated by an authenticator app on your phone. Available to all account types (Owners and IAM Members).
- **Passkey** - a passwordless method based on public-key cryptography (WebAuthn standard). Passkeys can act as a second factor, or — if your device supports user verification — as a complete single-step login that handles both factors at once. Available to account Owners only.

Once your primary login credentials are validated, you will be redirected to the Multifactor Authentication screen. If both MFA methods are enabled on your account, the **passkey** screen displays by default.
Once your primary login credentials are validated, you are redirected to the Multifactor Authentication screen. If both MFA methods are enabled on your account, the **passkey** screen displays by default.

<Tabs>
<TabsTab label="Log in with a passkey">
<Message type="note">
Passkey authentication is currently only available for IAM Owners.
</Message>
1. Click **Use passkey**. Your password manager opens.
2. Follow the steps in your password manager to complete verification.

1. Go to the [Scaleway console](https://account.scaleway.com/).
2. If your browser detects a passkey for your account, you are automatically prompted to authenticate. Complete the verification step (for example, a fingerprint scan or PIN). If no passkey is detected automatically, click **Continue with your passkey** and follow the steps in your browser or OS prompt to complete verification.
Once the passkey is validated, you are redirected to the Organization dashboard.
</TabsTab>
<TabsTab label="Log in with TOTP">
Expand All @@ -133,4 +155,4 @@ Once your primary login credentials are validated, you will be redirected to the

## Troubleshoot login issues

If you have problems logging in to the console, refer to the [dedicated troubleshooting page](/account/troubleshooting/cannot-log-into-my-account/).
If you have problems logging in to the console, see [I cannot log in to my account](/account/troubleshooting/cannot-log-into-my-account/).
Loading
Loading