Overview

Sigma Domain uses authentication to secure your account and connect to external services. This guide covers managing your login credentials and configuring authentication for imported tools.

Account Authentication

Login Methods

• Email and password - Standard login with your registered email
• Social login - Sign in with Google, GitHub, or other providers
• Mobile app - Biometric authentication on supported devices

Changing Your Password

1. Open Settings (gear icon in the top bar)
2. Navigate to Account or Security
3. Click Change Password
4. Enter your current password, then your new password
5. Click Save

Two-Factor Authentication (2FA)

If available:

1. Go to Settings > Security
2. Enable Two-Factor Authentication
3. Scan the QR code with your authenticator app
4. Enter the verification code to confirm

Session Management

• Sessions persist across browser refreshes
• Auth tokens are stored securely in encrypted local storage
• On mobile, tokens sync between app restarts
• If you experience login issues, try clearing your browser cache

Tool/API Authentication

When you import external tools, they often require authentication credentials to access the external API.

API Key Authentication

1. After importing a tool, check if it needs an API key
2. Ask: "Set up authentication for [tool name]"
3. Enter your API key when prompted
4. The key is encrypted and stored securely

OAuth2 Authentication

For services that support OAuth (Google, Slack, GitHub, etc.):

1. Click the Connect button on the tool
2. You'll be redirected to the service's authorization page
3. Grant the requested permissions
4. You'll be redirected back to Sigma Domain
5. The connection is now active

Bearer Token Authentication

1. Get your bearer token from the external service
2. Ask: "Configure bearer token for [tool name]"
3. Enter the token when prompted

Basic Authentication

For APIs requiring username/password:

1. Ask: "Set up basic auth for [tool name]"
2. Provide the username and password
3. These are encoded and sent with each request

Managing Credentials

View Connected Services

• Ask: "What services am I connected to?"
• Or check Settings > Integrations

Update Credentials

• "Update my API key for [service name]"
• For OAuth: disconnect and reconnect
• For API keys: enter the new key to replace the old one

Disconnect a Service

• "Disconnect my [service name] integration"
• This revokes the stored credentials
• You'll need to re-authenticate to use the tool again

Troubleshooting

"Unauthorized" Errors (401)

• Your API key or token may have expired
• Regenerate the key in the external service's dashboard
• Update the key in Sigma Domain

OAuth Token Expired

• OAuth tokens auto-refresh in most cases
• If refresh fails, disconnect and reconnect the service
• Check that you haven't revoked access in the external service

"Forbidden" Errors (403)

• Your API key may lack required permissions
• Check the scopes/permissions on the external service
• You may need to upgrade your API plan

Login Issues

• Clear browser cache and cookies
• Try logging in with a private/incognito window
• If using social login, ensure the provider account is accessible
• Contact support if you can't recover your account

Security Best Practices

1. Use unique API keys - Don't reuse keys across services
2. Rotate keys regularly - Update API keys periodically
3. Use least privilege - Grant only necessary permissions for OAuth
4. Monitor usage - Check tool execution history for unexpected activity
5. Disconnect unused services - Remove integrations you no longer use