Login, sessions and My Domain (subdomain)
Every org runs on its own subdomain. Details of login, password reset and session security.
My Domain: your org's address
Every org has its own address: yourcompany.ohana360.com. When you log in from ohana360.com, the system automatically redirects you to your org's subdomain. Your session is valid on all ohana360.com subdomains; no second login is needed.
You can view your subdomain under Setup > My Domain. The address is generated from your organization name at sign-up.
Logging in
- Open
ohana360.com(or your org address directly) in the browser. - Enter your e-mail and password.
- The system takes you to your org's home page.
Password reset
Use the Forgot Password link on the login screen. A single-use reset link is sent to your e-mail. You can also change your password from the profile menu at the top right.
Session security
- Sessions are managed server-side with secure (HttpOnly + Secure) cookies.
- CSRF protection is enforced with a client verification header.
- Passwords are stored irreversibly (bcrypt); nobody can see your password.
Multiple orgs
An e-mail address belongs to one org. Platform administrators (Ohana360 HQ) may enter orgs for support purposes within their authorization; these entries are audited and a banner at the top of the screen always shows which org you are in.