Customertimes · Internal AI Platform

Sign In

This is the Customertimes internal AI platform. Sign in with the passkey you created during registration. WebAuthn passkeys are the only credential — no password is created or stored here.

How passkey login works, recovery, and enterprise options

How Passkey Login Works

Passkey authentication uses public-key cryptography. No passwords are transmitted or stored.

1Enter your email address
2The server sends a random cryptographic challenge
3Your device signs the challenge with the private key stored during registration (biometric or PIN confirmation)
4The server verifies the signature against the stored public key and issues an OAuth 2.0 session token via PKCE

Magic Links (Recovery)

If you have lost access to your passkey (new device, cleared browser data), use "Don't have a passkey?" to receive a time-limited, single-use link that lets you create a new passkey on this device. Note: Outbound email is optional on this instance; when it is not configured, an administrator can issue the recovery link for you.

Enterprise Integration Options

The library can act as the identity provider using WebAuthn passkeys, or optionally integrate with enterprise identity infrastructure during implementation. There are many options available for proper enterprise integration:

SAML 2.0 / OpenID Connect

Optionally redirect authentication to your IdP (Okta, Azure AD, Google Workspace). After authentication, the IdP sends a signed assertion with the user's identity, roles, and group memberships. The platform issues a local session.

SCIM Directory Sync

User accounts can be created and deactivated automatically from your corporate directory. No manual provisioning required.

MCP Server Authentication

After login, users access MCP (Model Context Protocol) servers that extend Claude's capabilities. Each MCP server authenticates via API keys stored in encrypted per-user secrets and exposes tool endpoints for databases, APIs, and internal services — governed by per-user permissions and audit logging.