First Login

Prism has different login flows depending on which portal you are accessing and your role.

Admin Portal Login

Customer Admin (SSO)

Most customer admins log in through SSO:

1. Navigate to your organization's Prism URL: https://yourcompany.prism.cloudkeeper.com
2. You'll be automatically redirected to your identity provider (Google, Microsoft, or custom OIDC)
3. Authenticate with your corporate credentials
4. You'll be redirected back to the Application Selection screen
5. Select Prism Admin and you'll be redirected to Admin Portal dashboard.

Customer Admin (Direct Login)

For initial setup or when SSO is not configured:

1. Navigate to https://yourcompany.prism.cloudkeeper.com/init
2. Enter your username and password and the MFA code
3. Click Sign In
4. You'll be redirected to the Prism Admin Portal

JIT Access Portal Login

The JIT Access Portal uses SSO exclusively:

1. Navigate to your organization's Prism URL: https://yourcompany.prism.cloudkeeper.com
2. After authenticating from your Identity Provider, you'll be redirected to the Application Selection screen
3. Select JIT Portal, you'll land on the JIT dashboard

CloudTrail Login

The CloudTrail also uses SSO:

1. Navigate to your organization's Prism URL
2. After authenticating from your Identity Provider, you'll be redirected to the Application Selection screen
3. Select CloudTrail, you'll land on the Trail List page

After Logging In

Depending on your role, you'll see different features:

Role	Admin Portal	JIT Portal	CloudTrail
Admin	Full access to all features	Can request + approve	Requires CloudTrail access toggle
SSO Admin	Full access excluding admin management	Can request + approve	Requires CloudTrail access toggle
Approver	Limited access	Can request + approve	Requires CloudTrail access toggle
Viewer	Limited access	Can request only	Requires CloudTrail access toggle

info

CloudTrail access is not tied to the role hierarchy. It is managed separately via a per-user toggle in Preferences > Admin Management. An Admin must enable CloudTrail access for each user individually.

Troubleshooting Login

If you're having trouble logging in:

• "Authentication Required" screen — You need to use the correct Prism URL
• SSO redirect fails — Check that your identity provider is configured correctly
• "Access Denied" — Contact your organization's Prism admin

See Login Issues for more troubleshooting steps.

Next Steps

• Quick Start: Admin — Get started with admin tasks
• Quick Start: JIT User — Request your first JIT access
• Quick Start: CloudTrail — Create your first trail