Sign-in and accounts

Every app Kuika AI builds includes a ready-made sign-in system for the people who use your app. You do not have to ask for it, and nobody writes login code by hand. New apps get sign-up, sign-in, email verification, password reset and sign-out out of the box.

What your app's users get

• Sign up and sign in with email and password. Passwords must be at least 8 characters.
• Email verification. After signing up, people enter a code sent to their email. They can press Resend code if it does not arrive.
• Password reset. People who forget their password get a code by email.
• Two-factor authentication. Users can add an authenticator app for a second step at sign-in. They get ten one-time recovery codes, shown once. Two-factor can be optional or required for everyone.
• Sign in with a code. If you turn it on, people can also sign in with a short code sent to their email.
• Account screens. Sign-in and account screens are part of the app and Kuika AI styles them to match your design.

By default, sign-up is open and email verification is required. Business screens need a signed-in user. The emails use your app's name, logo and color, and are sent through the email provider you pick under More, then Email.

Change the rules by asking

Tell Kuika AI what you want and it changes the settings for you.

Close registration so only admins can create accounts, and require two-factor sign-in

You can also limit sign-up to your company's email domains, set a stricter password rule, or add an in-app user screen so admins can create users with a temporary password, change roles, suspend people and reset two-factor.

Manage users

Open More, then Users & access. It has four tabs:

• Users. See the app's accounts. Create a user, edit roles, sign someone out everywhere, reset two-factor, suspend or reactivate, mark an email verified, or delete. Suspending blocks sign-in right away. Deleting is permanent. You can export the list with Export CSV.
• Roles. See and edit what each role can do. More in Roles and permissions.
• Sign-in & policy. Turn sign-in on or off, set the sign-up mode, email verification, password reset, two-factor and the default role.
• Activity. See who changed which account, role or policy.

The Environment selector switches between Preview and Test. They do not share accounts, so create test users in each one. Accounts made in the preview do not carry over when you publish.

Try the app as someone else

In the preview, Preview as opens your app as a chosen role, as signed out, or with Full access. Full access is your own builder session, not an account in the app. To test sign-up or per-user data, create a real user in Users & access.

Company sign-in (SSO)

If your company has it enabled, people can sign in to your app with their work account instead of a password. Company sign-in supports OIDC, SAML and LDAP / Active Directory. Setup is done once for the whole workspace, and the provider list includes presets for Microsoft Entra ID, Okta, Keycloak and Google Workspace.

When it is on, the sign-in screen shows the company sign-in option next to the email form, and you can map your company's groups to the app's roles under Roles. If you are not sure whether your workspace has it, ask your workspace admin. Company sign-in with OIDC and SAML is not available in mobile apps.