Authentication and Workspaces
BeWo provides a secure, multi-tenant environment where each Workspace functions as an isolated container for data storage, user management, and integrations. Familiarity with how to log in, leverage different authentication methods, and administer workspaces is essential for maintaining data security and efficient workflows.
What Is a Workspace?
A Workspace in BeWo acts as a distinct environment (or “tenant”) that holds:
- Carbon Accounting & ESG Data: Financial transactions, classification outputs, and emission calculations.
- Configuration Details: ERP integrations, user roles, permission sets, and organizational boundaries.
- Reporting Outputs: Emissions inventories, historical baselines, and other documentation.
Seamless Switching
Users with access to multiple workspaces, such as group-level administrators overseeing several subsidiaries, can quickly switch between them in the platform interface. Each workspace is separated from others to avoid accidental cross-organizational data mixing.
If you belong to multiple workspaces:
- Access the Workspace Menu: Found in the top-left corner.
- Select a Workspace: The interface reloads to reflect data, settings, and usage for that specific workspace.
Login Methods
BeWo supports three primary login approaches, allowing organizations to adopt the security paradigm best suited to their needs:
1. Email/Password
- Navigate to the Login Page: Enter your email and password.
- Verify email: When you sign up for a new Email/Password account, you will have to verify your account with a code sent to your email inbox.
2. Google Single Sign-On
For teams standardized on Google Workspace:
- Click “Sign in with Google” on the login page.
- Select the Relevant Google Account: If logged into multiple accounts, choose the one associated with your BeWo user.
- Finalize Authentication: After consenting to any required permissions, you are redirected into the platform.
Advantages:
- Reduced Password Overhead: Users manage fewer passwords, relying on their Google identity.
- Security via Google: Benefit from Google’s advanced identity management features (e.g., enforced multi-factor authentication, if configured).
3. Microsoft 365 Single Sign-On
If your organization uses Microsoft 365:
- Click “Sign in with Microsoft” on the login page.
- Authenticate with Microsoft: Enter your corporate email address and password, completing any additional MFA steps configured in your Microsoft Entra ID (formerly Azure Active Directory) environment.
- Authorize Access: Upon successful sign-in, you will be redirected to BeWo.
Advantages:
- Centralized Identity: Leverages existing corporate credentials and MFA policies.
- Seamless User Experience: Minimizes extra logins for employees who are already signed in to Microsoft 365.
Best Practices
- Adopt SSO Where Feasible: Google or Microsoft 365 Single Sign-On can streamline login experiences and unify corporate security policies.
- Review User Lists Regularly: Check for departing employees, changes in roles, or newly required access.