Authentication
CanvOS uses Nextcloud as the central identity source. You log in once to the workspace; those credentials grant access to the underlying services.
Sign-in flow
- You sign in to the workspace (
app.canvos.eu). - The workspace verifies your username and password against Nextcloud.
- The session keeps your identity — including your organisation and whether you are an admin.
- For services such as chat (Matrix) and the Office editor, a session is established in the background on your behalf.
Two-factor authentication
Organisations can enable MFA. In addition to a password, a second step then follows (a code or security key).
Chat identity
For chat, every user gets a Matrix account that matches the Nextcloud user. Because usernames can be an email address and Matrix disallows certain characters, the username is consistently mapped to a valid Matrix identity. Accounts are created automatically on first use.