People you add in Gate

For a Gate with no directory, or for the few people outside it (a contractor, an auditor, a second admin). Works on every edition.

Add someone

1. Identity → People.
2. Email, a temporary password (8 or more characters), and the role:
   • Person: uses AI through Gate, sees their own audit trail.
   • Gate admin: everything, including Identity, Guardrails and License.
3. + Add person. Gate may ask for your authenticator code.
4. Give them the address shown on the card (for example https://ai.corp.example/gate) and the temporary password, by a channel you trust (in person, or a phone call). Gate does not send email.

At their first sign-in they set up an authenticator app: scan the QR code, type the 6-digit code. From then on they sign in with email, password and code. The Authenticator column shows set up once they have.

Forgot password, or new phone

On an on-prem Gate there is no email reset. The sign-in page tells people to ask you. Then:

1. Identity → People, find them, press Reset.
2. Enter a new temporary password.

They sign in with it and set up their authenticator again. Their history and settings are kept.

On Hosted Gate, people can also use Forgot password? and Lost your authenticator? on the sign-in page; both work by email.

Remove someone

Identity → People → Remove. They lose access at once and stop counting as a seat. Their audit history stays. Adding the same email later brings them back with a fresh temporary password and authenticator.

People from Active Directory or Google have no Remove button: disable them in the directory and Gate follows.

Keep two admins

If the only admin loses their authenticator on an on-prem Gate, nobody can reset them. Always have a second Gate admin, through Identity → People or the Gate admins AD group.

Seats

Every active person counts, however they sign in. See License & billing.