Skip to main content

Setup & onboarding

This page is the admin side — creating an org, inviting people, and how sign-in works.

Authentication

Pulse signs in through WorkOS AuthKit. Every new org starts in AuthKit mode (email + password, magic link, passkey, or social login). Enterprise SSO (SAML / OIDC federation to Entra, Okta, or Google) is available on request. The Pulse backend mints its own session tokens and manages refresh, so it's identity-provider-agnostic.

Creating an organization

Any signed-in user can create an org from sign-up; the creator becomes its first org admin, and Pulse seeds a default status vocabulary. (Intrasys can also provision orgs centrally.) Orgs support suspend, soft-delete with a grace period, and restore.

Org settings include timezone (default Asia/Singapore), the end-of-day archive time, the status-staleness window, and notification settings.

Inviting members

An org admin invites people by email under Admin → Members; the invitee accepts via an emailed link. A team admin can add existing org members to their team but can't invite brand-new emails. Admin-created accounts get a welcome email to set a password.

Roles & permissions

RoleCan
Super adminOrg lifecycle, billing, feature flags, audited impersonation. Does not read tenant data by default.
Org adminCRUD teams, projects, members, statuses, settings, and share links; configure SSO.
Team adminManage a team's membership (from existing org members), rename it, toggle private, manage its share links.
MemberCRUD and reorder their own TODOs; set their own status; view dashboards for their teams.
Public viewerRead a shared dashboard.

Every app request is scoped to an org (/api/v1/o/:slug/*), and admin actions are gated by role server-side.

Presence vocabulary

Under Admin → Statuses, curate the org's status list — label, color, icon, and each status's source (manual / integration-only / auto) and default. You can also define office locations (geofences) that set a status automatically when a member is on site.

  • Public share links publish a read-only dashboard — see Features → Share links.
  • The integration API lets another system set statuses and manage TODOs with a bearer token — see the Integration API.