Skip to content

Sign in and organizations

Use Sign in on modelfence.ca. Production uses the identity provider configured by the operator, with a server-managed session cookie. You do not need a GitHub personal access token to sign into ModelFence.

Your Microsoft Entra account, your ModelFence organization membership and a GitHub App installation are separate things. Signing in does not grant repository access or access to somebody else’s organization.

Onboarding guides new users through naming an organization, connecting a source and reviewing initial coverage. Existing members can switch organizations from the application shell. Check the selected organization before starting a scan, changing a policy or exporting a report.

Organization-specific links include an organization ID. Sharing a link does not grant membership: someone outside that organization may receive Not found, even when the item exists for you.

The current application lists existing members and lets an Owner change their roles. Self-service email invitations and automatic SSO group synchronization are not implemented. Contact the operator if a colleague cannot join through the available onboarding and membership workflow.

See the role matrix before requesting more access. Most investigations need Analyst, not Owner.

Low-cost deployments can scale the API to zero and stop an idle database. Opening the app can show Starting while it reconnects. Wait for the indicated retry rather than opening many tabs. If the screen never advances, see troubleshooting.

Development may expose Demo Owner, Demo Analyst, Demo Viewer and a second tenant for testing isolation. These identities and synthetic fixtures are disabled in Production. If you expect your real account, check that you opened the correct deployment.

Use the account menu to sign out of the ModelFence session. Follow your identity provider’s own controls when you also need to end its browser session. On shared machines, close any downloaded reports and clear them according to your organization’s handling policy.