Authentication

Alphorn uses email-based authentication with optional two-factor authentication (2FA) and SSO.

Sign Up

Create an account at app.alphorn.dev with your email address. For self-hosted instances, navigate to your instance URL.

Single Sign-On (SSO)

Alphorn supports signing in with GitHub, Google, Microsoft, or any OIDC-compliant identity provider (Keycloak, Okta, Azure AD, etc.). Providers appear on the login page automatically when configured.

• Hosted — GitHub, Google, and Microsoft sign-in are available out of the box.
• Self-hosted — Set the provider environment variables to enable SSO. See Self-Hosting → SSO / OAuth for setup instructions.

Two-Factor Authentication (2FA)

Secure your account with TOTP-based two-factor authentication.

Enabling 2FA

1. Go to Settings → Security
2. Click Enable 2FA
3. Scan the QR code with an authenticator app (Google Authenticator, Authy, 1Password, etc.)
4. Enter the 6-digit code to confirm
5. Save your recovery codes in a secure location

Organization-wide 2FA

Organization owners can enforce 2FA for all members:

1. Go to Organization Settings → Security
2. Enable Require 2FA
3. Members without 2FA will be prompted to set it up on their next login