Create a local workspace

This article describes how to create and configure a local workspace in which Cerby manages the identity and authentication of users.

With Cerby, you can configure a local workspace when you need Cerby to manage the identity and authentication of users instead of leveraging an identity provider (IdP) such as Okta or Azure AD.

In local workspaces, users are added via direct invites from Cerby to their email addresses, and user management is performed through the All members view. In regular workspaces, the IdP acts as the authoritative source of user identity, and changes in user accounts, attributes, or permissions are synchronized downstream to Cerby via the System for Cross-Domain Identity Management (SCIM) specification.

Regarding authentication, users authenticate directly to Cerby with credentials, username and password, managed by Cerby in local workspaces. In regular workspaces, users are redirected to their IdP's authentication page to log in to Cerby.

The user who creates and configures a local workspace becomes the Workspace Owner. They can add users to the workspace and assign them the Workspace Admin or Workspace User roles. For more information about roles, read the article Roles and permissionsarrow-up-right.

In addition to editing the workspace details, Workspace Admins can perform the following user management tasks in local workspaces:

  • Add new users to the workspace.

  • Remove users from the workspace.

  • Edit the workspace-level role of users.

  • Reset multi-factor authentication and password for users.

Local workspaces can be used when businesses collaborate with external parties who don’t belong to their business domain, such as contractors, agencies, partners, vendors, and clients. With the Partners feature, a regular workspace can securely share accounts, secrets, and collections with a local workspace. For more information about this feature, read the How to use Partnersarrow-up-right article.

This article describes how to configure a local workspace.


Requirements

The following are the requirements to create and configure a local workspace:

  • An email invite sent by the Cerby team to create a workspace

  • An authentication app installed on your mobile phone, such as Google Authenticator, Okta Verify, Microsoft Authenticator, Duo Mobile, or Authy

    NOTE: Ask your IT or Security department for the authorized authentication app.


Create and configure a local workspace

To create and configure a local workspace, you must complete the following main steps:

The following sections describe each main step.

1. Create your Cerby account and workspace

To create your Cerby account and the local workspace, you must complete the following steps:

  1. Click the Create your Workspace button from the invite that Cerby sent to your email address. The Welcome to Cerby page is displayed, as shown in Figure 1.

    Screenshot of the Welcome to Cerby page, where multiple buttons are displayed with the different options to sign in to Cerby.
    Figure 1. Welcome to Cerby page
  2. Click the Sign in with Cerby button. The Let’s create your workspace page is displayed.

  3. Enter the name of your workspace in the Workspace name field.

  4. Click the Create Workspace button. The Create your account page is displayed.

  5. Create your Cerby account by entering the following information in the corresponding fields:

    • Name

    • Last name

    • Email

    • Confirm Email

    • Password

    • Confirm Password

  6. Click the Create my account button. The Your Workspace page is displayed with a success message and the domain of your workspace, for example, contentzilla.cerby.com.

  7. Click the Login button. The authentication page for Cerby is displayed, as shown in Figure 2.

    Screenshot of the authentication page for Cerby with the Username and Password input fields and the Log in button.
    Figure 2. Authentication page for Cerby
  8. Enter your Cerby account credentials in the corresponding fields:

    • Your email address in the Username field

    • Your password in the Password field

  9. Click the Sign in button. The homepage of the Cerby dashboard is displayed, as shown in Figure 3.

    Screenshot of the homepage of the Cerby dashboard, comprised by a left navigation drawer and a main section.
    Figure 3. Homepage of the Cerby dashboard

Your local workspace is now created. The next step is 2. Install the Cerby mobile app and browser extension.

2. Install the Cerby mobile app and browser extension

To install the Cerby mobile app and browser extension for an optimal experience with the platform, you must complete the instructions from the corresponding articles:

The next step is 3. Turn on MFA for your Cerby account.

3. Turn on MFA for your Cerby account

To turn on multi-factor authentication (MFA) for your Cerby account with an authentication app, you must complete the instructions in the article Turn on MFA for your Cerby accountarrow-up-right.

When you are done. It’s time to start adding your accounts to Cerby and sharing them with your colleagues.


Join Cerby from an invite

After being added to a local workspace by a Workspace Owner or Workspace Admin, all users receive an invite through email to join Cerby and set up their account.

To join Cerby from an invite, you must complete the following steps:

  1. Open the message Cerby sent to your email address. The message contains the following information:

    • Workspace name

    • Username

    • Temporary password

  2. Click the Join now button from the message. The Cerby authentication page is displayed.

  3. Enter your username and temporary password in the corresponding fields.

  4. Click the Sign in button. The Change Password page is displayed.

  5. Enter a new password for your Cerby account and your profile information in the corresponding fields:

    • New Password

    • Enter New Password Again

    • Name

    • Family name

  6. Click the Send button. The Cerby dashboard is displayed.

To start using Cerby, all users must complete the following steps from the Create and configure a local workspace section:


Troubleshooting: “We couldn’t turn MFA on for your profile” message

When you try to turn on MFA for a Cerby account that belongs to a local workspace, and you haven’t set your mobile phone time as automatic, the “We couldn’t turn MFA on for your profile” message may appear, as shown in Figure 5.

Screenshot of the “We couldn’t turn 2FA on for your profile” message when trying to verify the authentication code in the Try the authentication code dialog box.
Figure 5. “We couldn’t turn MFA on for your profile” message

The error message is displayed when you verify the authentication code that your authentication app provides after scanning the QR code. This error occurs because the authentication app generates time-based codes that expire; therefore, when your mobile phone has a different time, the code could have expired or is not yet valid.

To solve this problem, set the time settings to automatic on your mobile phone by following the corresponding instructions:

Now, try again turning on 2FA by following the instructions in the article Turn on MFA for your Cerby accountarrow-up-right.


The following articles describe the actions and steps to manage local workspaces:

Last updated

Was this helpful?