In the web-based User Interface (UI), users gain access to Sandfly by entering either a username and password combination or, when configured, Single Sign-On (SSO).

Logging into Sandfly

First Time Admin Login

From the login page, enter "admin" for the Username, enter the password (provided as part of the first-time setup page or the text-based installation process) into the Password field, and click the Login button.

Regardless of how the admin password was initially created, it can be changed later by using the Reset Password button found on either the Settings > User Accounts or the My Account page.

Signing In By User Type

• Local - Log in by completing the Username and Password fields on the Sandfly login screen and then clicking the Login button. Sandfly users of this type have their passwords managed by anyone with the admin role of the Sandfly application.
• SSO (Single Sign-On) - Log in by simply clicking on the Login With Single Sign-On button on the Sandfly login screen. You may need to log into the service that provides your corporate SSO if a valid SSO session is not already active. Sandfly users of this type have their passwords managed by those who provide the SSO service.

Link Pass-Through

When a Sandfly web session is not authenticated and a Sandfly server URL, other than the home page, is entered into the browser, that URL will be passed through and loaded after a successful login, instead of opening the dashboard. This makes it faster to reach desired information with new or expired sessions.

Configurable Features

Login Banner

Information of your choosing can be displayed on the login page alongside the login form. See the Login Banner Form section for configuration details.

Disable UI Login Form

The Username and Password fields on the login form can be hidden from the UI while not affecting authentication via the API. This is intended for deployments where SSO is fully configured and operational, as it prevents user confusion about the expected login method.

To hide these fields, add the environment variable SF_DISABLE_UI_LOGIN_FORM=true to the config.server.env file. The server must then be properly restarted for the change to take effect.

If SSO becomes unavailable, comment out this line and restart the server to restore access via the login form.