Skip to content

Authentication

CanvOS uses Nextcloud as the central identity source. You log in once to the workspace; those credentials grant access to the underlying services.

Sign-in flow

  1. You sign in to the workspace (app.canvos.eu).
  2. The workspace verifies your username and password against Nextcloud.
  3. The session keeps your identity — including your organisation and whether you are an admin.
  4. For services such as chat (Matrix) and the Office editor, a session is established in the background on your behalf.

Two-factor authentication

Organisations can enable MFA. In addition to a password, a second step then follows (a code or security key).

Chat identity

For chat, every user gets a Matrix account that matches the Nextcloud user. Because usernames can be an email address and Matrix disallows certain characters, the username is consistently mapped to a valid Matrix identity. Accounts are created automatically on first use.