Signing in

Bookbag does not hold your password. There is no sign-in form in the product, no registration form and no password reset form. All of that lives at sso.bookbag.ai — the shared Bookbag account, used by every product built on this stack.

One account, one password, one set of devices, one notification inbox, across all of them.

What signing in looks like

1. You open app.bookbag.ai, or any page in it.
2. If you are not signed in, you land on a page that says Taking you to Bookbag sign-in… and immediately forwards you. There is a link labelled Continue if the redirect does not fire on its own.
3. You sign in at sso.bookbag.ai with your email and password.
4. You are sent straight back to the page you were trying to reach.

That last part is worth knowing: a link to a specific project, opened while signed out, brings you back to that project rather than dumping you on the dashboard.

Creating an account

Open app.bookbag.ai and choose to register, or go to sso.bookbag.ai directly. Either way you end up in the same place: registration happens at the account service, and the account you create works in every Bookbag product.

Your email address has to be verified before it can sign you in here. An unverified address is refused with:

That address is not verified with Bookbag SSO, so it cannot be used to sign in here.

Your name and picture

Your first name, last name and profile picture come from your Bookbag account and are refreshed on every sign-in. Change them at sso.bookbag.ai, in your profile, and Bookbag picks the change up the next time you sign in.

Staying signed in

A session lasts 30 days from its last use, not 30 days from sign-in. Using Bookbag extends it. Leave it alone for a month and you sign in again.

Each device gets its own session, so signing in on your phone does not sign you out of your laptop halfway through a build.

Signing out

The account menu — your avatar, top right — has Sign out. There is no confirmation.

Signing out signs you out of every Bookbag product, not just this one, because it ends the shared session. It can take up to about ten seconds for this product to notice; a page loaded in that window may still show your data. Reload and you are out.

The same is true in reverse. Ending a device from your profile at sso.bookbag.ai ends its Bookbag session too.

Where your account settings live

Nothing about your identity is editable inside Bookbag. The /account page has a card headed Your account explaining why:

Your name, your email, the devices you are signed in on and the organizations you belong to are kept once, at Bookbag account, for every product.

Two buttons take you there:

• Open Bookbag account → your profile, where you change your name, email, password and picture, and see or end your signed-in devices.
• Your organizations → where you manage organizations and the people in them.

The one thing you can change from inside Bookbag is the light or dark theme, and even that is stored on your account so it follows you into the other products.

Sign-in errors and what they mean

All of these return you to the sign-in page with the message shown.

Message	Cause
Single sign-on is not configured on this server.	The installation has not been given its account-service credentials. An administrator's problem, not yours.
Could not reach Bookbag SSO: …	The account service did not answer. Try again shortly.
Sign-in was cancelled.	You declined at the sign-in screen.
That sign-in took too long. Please try again.	The sign-in attempt expired before you finished. Start again.
That sign-in could not be verified. Please try again.	The handshake did not check out. Almost always fixed by starting again.
Bookbag SSO returned no email address.	Your account has no email on it.
That address is not verified with Bookbag SSO, so it cannot be used to sign in here.	Verify your email at sso.bookbag.ai.
This account is paused.	An administrator has paused the account. It stops working immediately, everywhere.
This account is blocked.	Same, permanently.

A session that expires while you are using Bookbag does not throw an error. The page notices, tells you your session has expired, and sends you to sign in again — returning you to the page you were on.

Next

• Your first app.
• Organizations — the workspace you are put in when you first sign in.