First Time User

first time login for users use chrome, edge, or firefox as your browser internet explorer is not supported navigate to https //one shi com and you will see the following login options click the login option used by your organization if you don't know which option to use, first try the microsoft login option, then the google login option if the microsoft and google login options haven't yet been activated by your organization's admin, click the shi one login option at the bottom of the menu, click don't have a login? register an account type in your email address and desired password click register if you see 'error the user already exists', you should click 'already have a login? log in to your account' then click 'forgot password?' check your email inbox for a verification email follow the instructions in the verification email to finish registering your login sign in to shi one using the shi one login option 'approval required', 'needs permission', or 'requires admin approval' if you try to sign in using the microsoft login option and see a message similar to the following a login message which includes text such as 'approval required', 'this app required your admin's approval to sign in and read user profile', and 'enter justification for requesting this app'a login message which includes text such as 'you can't access this application' and 'myapp needs permission to access resources in your organization that only an admin can grant please ask an admin to grant permission to this app before you can use it ' this means your organization has not yet granted shi one the necessary sso permissions s end this url to an o365/azure admin in your organization (usually someone on your it team) to authorize the application on your behalf https //login microsoftonline com/common/adminconsent?client id=612f0fa7 b4f7 44b9 8684 5e0c36200771 once permission is granted, you will sign in using the microsoft sso login option while you wait for permission to be granted, you can sign in to shi one using the shi one login option click the shi one login option, click 'don't have a login? register an account', complete the registration process, then sign in to shi one using the shi one login option once sso permission is granted, you will use the microsoft sso login option 'your account is pending approval from your company administrator' this means your organization's shi one admin has not yet approved your shi one profile your organization's shi one admin can approve your profile within shi one by following these steps navigate to settings > user management click the awaiting approval tab to the right of each email address, click the role drop down and choose either user or admin click the save button in the upper right once your organization's shi one admin has approved your profile, you will be able to sign in to shi one 'your administrator has configured the application shi one portal to block users unless they are specifically granted access to the application' a login message which includes the text 'your administrator has configured the application shi one portal to block users unless they are specifically granted access to the application the signed in user is blocked because they are not a direct member of a group with access, nor had access directly assigned by an administrator please contact your administrator to assign access to this application 'a login message which includes the text 'your administrator has configured the application shi one portal to block users unless they are specifically granted access to the application the signed in user is blocked because they are not a direct member of a group with access, nor had access directly assigned by an administrator please contact your administrator to assign access to this application ' this means your organization's microsoft/azure admin needs to assign access within microsoft/azure for you to access shi one send this url to your organization's microsoft/azure admin (usually someone on your it team) so that they can add you to the necessary group by following the steps here https //learn microsoft com/en us/azure/devops/organizations/security/add remove manage user group security group?view=azure devops\&tabs=current page#add users or groups to a security group if you are in the necessary group and still see the same login message, access is being affected by conflicting permission inheritance from another group your microsoft/azure admin must reconcile your access permissions utilizing the information here https //learn microsoft com/en us/azure/devops/organizations/security/about permissions?view=azure devops\&tabs=preview page#permission inheritance once your access is assigned correctly in microsoft/azure, you will be able to sign in shi one using the microsoft sso login option