Step-by-step setups¶
Each page below takes one setup from nothing to "my people are using AI as themselves", with every click and every command. Follow the one that matches you, then the sign-in page for your directory.
1. Where Gate runs¶
| You have | Follow | Time |
|---|---|---|
| No servers, or everything in the cloud (Google Workspace, Microsoft 365, SaaS apps) | Hosted | 15 minutes |
| Active Directory and Windows file servers | Windows Server | about 1 hour |
| Active Directory, and a Linux server or VM | Linux appliance | about 1 hour |
| A Mac Studio to run the AI model | Mac Studio | about 1 hour |
| An NVIDIA DGX Spark (or another model server) | DGX Spark | about 1 hour |
Not sure?
If people log on to Windows PCs with a domain account and keep files on \\server\share, pick Windows Server (or Linux if you prefer Linux). Hosted Gate cannot reach your internal file shares or Active Directory.
2. How people sign in¶
| Your directory | Follow | Works on |
|---|---|---|
| Active Directory, domain-joined Windows PCs | Windows sign-in (Kerberos) | Windows Server, Linux, Mac |
| Some PCs or apps that cannot do Kerberos | NTLM for older PCs | Windows Server, Linux, Mac |
| Google Workspace | Google Workspace | Hosted |
| No directory, or a few people outside it | People you add in Gate | Every edition |
ADFS / SAML, Microsoft Entra ID, Okta and RADIUS are in build. They appear under Identity when they ship.
3. Then, everywhere¶
- File shares as each person: the AI opens
\\server\sharewith the person's own Windows permissions. - Guardrails, a worked example: from learning mode to a saved policy, rule by rule.
- Prove it works: test two people, ask the question, read the audit row.
Before you start (every on-prem edition)¶
Have these ready and the hour goes smoothly:
- [ ] A DNS name for Gate, like
ai.corp.example, with an A record pointing at the server. People must open Gate by this name, never by IP address, or Windows sign-in falls back to a login page. - [ ] Your license file. Sign in at app.acutisgo.com/gate → License → start the 14-day trial or buy seats → download the file.
- [ ] A domain admin for about ten minutes (service account, service name, delegation, one Group Policy).
- [ ] The server's clock in step with the domain controllers (within 5 minutes). Kerberos refuses anything further apart.
- [ ] An authenticator app on your phone (Google Authenticator, Microsoft Authenticator, Authy, 1Password). Every Gate admin sets one up at first sign-in.