Authentication troubleshooting
Use this guide when sign-in, verification, password recovery, OAuth, or session behavior is not working as expected.Confirm the account identity
Before resetting anything, verify the email/account you intend to use. Duplicate accounts can make organization membership, projects, and billing appear to be missing even when authentication itself is working.Password sign-in fails
Check:- the email is entered correctly
- the intended account uses password sign-in
- the account is not in a restricted state that blocks login
- you are not repeatedly retrying an old password after completing a reset
Verification link fails
Verification links can expire or become invalid after use. Request a fresh verification action through Starfire instead of repeatedly using the same link.Password reset fails
Confirm you are using the newest reset action for the correct account. If multiple reset messages were requested, an older one may no longer be the right recovery path.OAuth sign-in fails
OAuth availability depends on deployment configuration. If a provider button is present but authentication fails, the issue can be in the provider flow, Starfire’s OAuth configuration, account linking, or account state. Do not manually merge identities unless Starfire provides an explicit supported account-linking path.Session expired or keeps disappearing
A session can end because of expiration, explicit sign-out, revocation, security actions, password changes, or account-state changes. If the account signs in successfully but is immediately unauthenticated again across multiple clients, escalate with timestamp and client information so session diagnostics can be inspected.Organization access disappeared after sign-in
Confirm you did not sign into a different Starfire account that happens to use another authentication method or email. Organization membership belongs to the Starfire account identity, not merely to the browser.Administrator checks
Authorized operators can inspect account state, verification, sessions/devices, organization membership, and security events before changing account data.Authentication & recovery
Review the normal identity flow.
Sessions & devices
Understand session persistence and revocation.