Authentication
Authentication
Section titled “Authentication”The SCF Controls Platform uses Google Sign-In for secure, seamless authentication. Simply click “Sign in with Google” and you’re in — no configuration required.
Signing In
Section titled “Signing In”For New Users
Section titled “For New Users”- Visit the platform at your organisation’s URL
- Click Sign in with Google
- Select your Google account (personal or Google Workspace)
- Grant permission to share your basic profile and email
- You’re signed in!
For Returning Users
Section titled “For Returning Users”- Visit the platform
- Click Sign in with Google
- Select your account — you may be signed in automatically if your browser remembers you
Account Types
Section titled “Account Types”The platform accepts any Google account:
| Account Type | Example | Notes |
|---|---|---|
| Google Workspace | you@company.com | Recommended for organisations |
| Personal Gmail | you@gmail.com | Works for individuals and small teams |
| Google Cloud Identity | you@domain.com | For organisations without full Workspace |
User Roles
Section titled “User Roles”After signing in, your access level depends on your assigned role:
| Role | Access |
|---|---|
| Admin | Full access: manage users, configure frameworks, view all data |
| User | Standard access: view and edit controls, evidence, and risks |
| Viewer | Read-only access: view controls and reports without editing |
Your organisation’s administrator assigns roles. Contact them if you need different access.
Organisation Access
Section titled “Organisation Access”Single Organisation
Section titled “Single Organisation”Most users belong to one organisation. After signing in, you’ll land directly in your workspace.
Multiple Organisations
Section titled “Multiple Organisations”If you’re a consultant or work across multiple organisations:
- Sign in with Google
- You’ll see an organisation selector
- Choose which organisation to work in
- Switch organisations anytime using the selector in the header
See the Consultant Portal guide for multi-organisation management.
Session Management
Section titled “Session Management”Session Duration
Section titled “Session Duration”- Sessions remain active while you’re using the platform
- After extended inactivity, you’ll be prompted to sign in again
- Closing your browser doesn’t immediately end your session
Signing Out
Section titled “Signing Out”- Click your profile avatar in the top-right corner
- Select Sign out
- You’ll be returned to the sign-in screen
Troubleshooting
Section titled “Troubleshooting”Sign-In Popup Closes Immediately
Section titled “Sign-In Popup Closes Immediately”Cause: The popup was closed before completing authentication.
Solution: Try again and wait for the Google sign-in screen to fully load before selecting your account.
”Popup Blocked” Message
Section titled “”Popup Blocked” Message”Cause: Your browser is blocking the sign-in popup.
Solutions:
- Look for a popup blocker icon in your browser’s address bar
- Click it and allow popups for this site
- Try signing in again
Sign-In Button Does Nothing
Section titled “Sign-In Button Does Nothing”Cause: Browser extension or script blocking.
Solutions:
- Temporarily disable ad blockers
- Try in an incognito/private browsing window
- Clear your browser cache and cookies
- Try a different browser
”Account Not Authorised” Error
Section titled “”Account Not Authorised” Error”Cause: Your Google account hasn’t been provisioned for this organisation.
Solutions:
- Contact your organisation administrator
- Verify you’re using the correct Google account
- If you’re new, ensure your signup has been processed
Signed In But No Data Appears
Section titled “Signed In But No Data Appears”Cause: You may not have been assigned to an organisation yet.
Solutions:
- Contact your administrator to verify your account setup
- If you just signed up, allow time for provisioning
- Try signing out and back in
Security
Section titled “Security”What We Access
Section titled “What We Access”When you sign in, the platform receives:
- Your email address (for identification)
- Your display name (for personalisation)
- Your profile picture (for your avatar)
We do not access:
- Your contacts
- Your calendar
- Your emails
- Your files
- Any other Google data
Data Protection
Section titled “Data Protection”- All connections use HTTPS encryption
- Authentication tokens are stored securely
- Your Google password is never shared with us
- You can revoke access anytime via your Google account settings
Revoking Access
Section titled “Revoking Access”To remove the platform’s access to your Google account:
- Go to Google Account Security
- Find “SCF Controls Platform” in the list
- Click Remove Access
- You’ll need to re-authorise next time you sign in
Getting Access
Section titled “Getting Access”For Organisations
Section titled “For Organisations”To get started with the SCF Controls Platform:
- Visit scfcontrolsplatform.com to learn about subscription plans
- Sign up for a trial or subscription
- Once provisioned, sign in with Google to access your workspace
For Team Members
Section titled “For Team Members”If your organisation already uses the platform:
- Ask your administrator to invite you
- You’ll receive an email notification
- Click the link and sign in with Google
- You’ll be added to your organisation’s workspace
Related Guides
Section titled “Related Guides”- Getting Started — Platform overview and first steps
- User Management — Managing team members and roles
- Consultant Portal — Multi-client management for consultants