--- title: First Time User slug: first-time-user icon: {"lucideIcon":"CircleUserRound"} docTags: createdAt: 2025-11-14T22:58:47.930Z --- ## First Time Login for Users Use Chrome, Edge, or Firefox as your browser. Internet Explorer is not supported. 1. Navigate to [https://one.shi.com](https://one.shi.com) and you will see the following login options ::Image[]{src="https://api.archbee.com/api/optimize/nK8tmOYQvXDjGjzJI5sM2-y-mkPeWaxNbKKYNUXt1wF-20250226-175232.png" size="20" width="816" height="1220" darkWidth="816" darkHeight="1220" position="center" showCaption="false" indent="3"} 2. Click the login option used by your organization - If you don't know which option to use, first try the Microsoft login option, then the Google login option 3. If the Microsoft and Google login options haven't yet been activated by your organization's admin, click the **SHI ONE login option**. 4. At the bottom of the menu, click **Don't have a login? Register an account** ::Image[]{src="https://api.archbee.com/api/optimize/nK8tmOYQvXDjGjzJI5sM2-_qmKCTfypHRGL_ovpqUFf-20250226-175347.png" size="26" width="794" height="952" darkWidth="794" darkHeight="952" position="center" showCaption="false" indent="3"} 5. Type in your email address and desired password 6. Click **Register** - If you see 'Error: The user already exists', you should click 'Already have a login? Log in to your account' then click 'Forgot Password?' 7. Check your email inbox for a verification email 8. Follow the instructions in the verification email to finish registering your login 9. Sign in to SHI One using the **SHI ONE login option** ### 'Approval Required', 'Needs Permission', or 'Requires Admin Approval' If you try to sign in using the Microsoft login option and see a message similar to the following: ::::VerticalSplit{layout="middle"} :::VerticalSplitItem ::Image[]{src="https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/iRuh8_LS02MKk1uw1eV_m_screenshot-2023-10-05-at-30556-pm.png" size="52" width="377" height="358" darkWidth="377" darkHeight="358" position="center" alt="A login message which includes text such as 'Approval required', 'This app required your admin's approval to sign in and read user profile', and 'Enter justification for requesting this app'" showCaption="false"} ::: :::VerticalSplitItem ::Image[]{src="https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/cnHA9AzpmREDXKdXou-RJ_screenshot-2023-10-05-at-30831-pm.png" size="60" width="445" height="421" darkWidth="445" darkHeight="421" position="center" alt="A login message which includes text such as 'You can't access this application' and 'MyApp needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it.'" showCaption="false"} ::: :::: This means your organization has not yet granted SHI One the necessary SSO permissions. Send this URL to an O365/Azure admin in your organization (usually someone on your IT team) to authorize the application on your behalf: - [https://login.microsoftonline.com/common/adminconsent?client\_id=612f0fa7-b4f7-44b9-8684-5e0c36200771](https://login.microsoftonline.com/common/adminconsent?client_id=612f0fa7-b4f7-44b9-8684-5e0c36200771) Once permission is granted, you will sign in using the Microsoft SSO login option. While you wait for permission to be granted, you can sign in to SHI One using the SHI ONE login option. Click the SHI ONE login option, click 'Don't have a login? Register an account', complete the registration process, then sign in to SHI One using the SHI ONE login option. Once SSO permission is granted, you will use the Microsoft SSO login option. ### 'Your account is pending approval from your Company administrator' ::Image[]{src="https://api.archbee.com/api/optimize/nK8tmOYQvXDjGjzJI5sM2-UXC3ltFPiCa8HVy_MXO-z-20250320-181829.png" size="40" width="585" height="266" darkWidth="585" darkHeight="266" position="center" alt="A login message which includes the text 'Your account is pending approval from your Company administrator. Please reach out to one of the following individuals to confirm your access' and 'If none of these users are available please contact SupportServices@shi.com tor support.'" showCaption="false"} This means your organization's SHI One Admin has not yet approved your SHI One profile. Your organization's SHI One Admin can approve your profile within SHI One by following these steps: 1. Navigate to **Settings -> User Management** 2. Click the **Awaiting Approval** tab 3. To the right of each email address, click the **Role** drop-down and choose either User or Admin 4. Click the **Save** button in the upper right Once your organization's SHI One Admin has approved your profile, you will be able to sign in to SHI One. ### 'Your administrator has configured the application SHI One Portal to block users unless they are specifically granted access to the application' ::::VerticalSplit{layout="middle"} :::VerticalSplitItem ::Image[]{src="https://api.archbee.com/api/optimize/nK8tmOYQvXDjGjzJI5sM2-B2ZV0_f1V-dgj3sHQ3xOn-20250320-173042.png" size="70" width="557" height="273" darkWidth="557" darkHeight="273" position="center" alt="A login message which includes the text 'Your administrator has configured the application SHI One Portal to block users unless they are specifically granted access to the application. The signed in user is blocked because they are not a direct member of a group with access, nor had access directly assigned by an administrator. Please contact your administrator to assign access to this application.'" showCaption="false"} ::: :::VerticalSplitItem ::Image[]{src="https://api.archbee.com/api/optimize/nK8tmOYQvXDjGjzJI5sM2-9061VWwAVKMjRjjVGfKtJ-20250320-173320.png" size="62" width="587" height="269" darkWidth="587" darkHeight="269" position="center" alt="A login message which includes the text 'Your administrator has configured the application SHI One Portal to block users unless they are specifically granted access to the application. The signed in user is blocked because they are not a direct member of a group with access, nor had access directly assigned by an administrator. Please contact your administrator to assign access to this application.'" showCaption="false"} ::: :::: This means your organization's Microsoft/Azure admin needs to assign access **within Microsoft/Azure** for you to access SHI One. Send this URL to your organization's Microsoft/Azure admin (usually someone on your IT team) so that they can add you to the necessary group by following the steps here: [https://learn.microsoft.com/en-us/azure/devops/organizations/security/add-remove-manage-user-group-security-group?view=azure-devops\&tabs=current-page#add-users-or-groups-to-a-security-group](https://learn.microsoft.com/en-us/azure/devops/organizations/security/add-remove-manage-user-group-security-group?view=azure-devops\&tabs=current-page#add-users-or-groups-to-a-security-group) If you are in the necessary group and still see the same login message, access is being affected by conflicting permission inheritance from another group. Your Microsoft/Azure admin must reconcile your access permissions utilizing the information here: [https://learn.microsoft.com/en-us/azure/devops/organizations/security/about-permissions?view=azure-devops\&tabs=preview-page#permission-inheritance](https://learn.microsoft.com/en-us/azure/devops/organizations/security/about-permissions?view=azure-devops\&tabs=preview-page#permission-inheritance) Once your access is assigned correctly in Microsoft/Azure, you will be able to sign in SHI One using the Microsoft SSO login option.