Sign in with Username & Password
Navigate to the Layer login page.
Enter your Layer username (for example:
jsmith) and your password.Click Sign In.
If your password has expired, you will be redirected to change it before continuing.
Tip:
Your profile picture (Gravatar) and your company’s branding will appear automatically when you enter your username, confirming you’re signing into the right account.
Sign in with Email Address
You can also use your email address instead of your username.
If your email matches one account
You will be signed in automatically. Your email is resolved to the matching username behind the scenes.
If your email matches multiple accounts
An Account Picker screen will appear showing all matching accounts.
Select the account you want to sign into.
Click Sign In.
Note:
Only active user accounts are shown. If you don’t see an expected account, contact your administrator.
Two-Factor Authentication (2FA)
If 2FA is enabled for your account, you will be prompted for an additional verification step.
Sign in with your username/email and password.
A verification code will be sent via SMS or voice call.
Enter the code on the Two-Factor Authentication screen.
Click Authorise.
If you didn’t receive the code, click Request Call to receive it by phone.
Note:
Once your device is verified, you won’t be asked for 2FA again on that device for 30 days (unless cookies are cleared).
2FA applies to all login methods.
Sign in with Microsoft 365 (SSO)
If enabled, you’ll see a Sign in with Microsoft 365 button.
First-Time Sign-In (Account Linking)
The first time you use Microsoft sign-in, your Microsoft account must be linked to your Layer account.
Automatic linking
Happens if your Microsoft email matches exactly one active Layer user.
You are signed in immediately.
Manual linking
Happens if multiple matches or no match is found.
You’ll be taken to a Link Your Account page.
Enter your Layer username and password.
This is a one-time step.
Subsequent Sign-Ins
Once linked:
Click Sign in with Microsoft 365.
You’ll be signed in automatically.
You may be asked to choose a Microsoft account if multiple accounts are active in your browser.
What happens during Microsoft sign-in
Click Sign in with Microsoft 365.
You’re redirected to Microsoft.
Sign in with your work account.
Microsoft authenticates you.
You’re returned to Layer.
Layer verifies the link and signs you in.
Note:
2FA is not required when signing in with Microsoft 365 because Microsoft has already verified your identity.
SSO-Only Mode
Your administrator may enforce SSO-only mode.
If your Microsoft account is already linked
The password field will be disabled.
You must use Sign in with Microsoft 365.
If your account is not yet linked
You can still sign in with username and password.
This allows you to complete the one-time linking process.
After linking, SSO-only mode is enforced.
Important:
SSO-only mode is enforced per company.
If you belong to multiple companies, the policy applies separately to each account.
API Login
If enabled by an administrator, you can log in using API credentials.
This is typically used for integrations, not browser sign-in.
Password Recovery
If you’ve forgotten your password:
Click Password recovery on the login page.
Follow the instructions to reset it.
Managing Microsoft 365 Links (Administrators)
Viewing Link Status
Go to:
Settings → Users → Edit → System tab
The Microsoft 365 Single Sign-On section shows:
Status: Linked or Not Linked
Microsoft Email: Linked address
Linked Date: When the link was created
Last Used: Last Microsoft sign-in
Removing a Link
Go to Settings → Users.
Select the user and click Edit.
Open the System tab.
Click Remove Microsoft 365 Link.
Confirm the action.
After removal:
The user can sign in with username and password.
Next Microsoft sign-in will require linking again.
The action is recorded in the audit trail.
Note:
This section only appears if SSO is enabled for the company.
Troubleshooting
“Your organization requires sign-in with Microsoft 365”
Your company has SSO-only mode enabled. Use Microsoft sign-in.
Password field is greyed out
SSO-only mode is active. Use Microsoft sign-in.
“This Microsoft account is already linked to another Layer user”
Contact your administrator to remove the existing link.
“Your Microsoft 365 organization is not configured for this Layer account”
Your Microsoft tenant doesn’t match the configured tenant. Contact your administrator.
Account picker doesn’t show an expected account
The account may be deactivated. Contact your administrator.
2FA code not received
Click Request Call or check your mobile number in your profile.
Microsoft sign-in shows “Access was denied”
You may have cancelled sign-in or lack permission. Try again or contact your administrator.
“Your session has expired” on link page
Restart the process from the login page.