Account Setup & Authentication

Creating a New Organization (Admin Signup)

When you create a new account, you also create a new organization. The first user of every organization is automatically assigned the Administrator role.

To sign up:

1. Navigate to the RWRD application URL.
2. On the authentication screen, click the Sign Up tab.
3. Fill in the required fields:
   • Work Email -- Your business email address.
   • Company Name -- The name of your organization. This appears on your dashboard header.
   • Industry -- Select from the available options (Technology, Financial Services, Healthcare, Energy, Manufacturing, Retail, Telecommunications, Airlines, Automotive, Real Estate, Professional Services, Education, Non-Profit). This selection helps the AI provide industry-relevant benchmarks and risk analysis.
   • Password -- Must be at least 8 characters.
   • Confirm Password -- Must match your password.
4. Check the box to accept the Terms of Service and Privacy Policy. You can click each link to review the full documents before accepting.
5. Click Create Account.

After successful signup, RWRD creates your organization and takes you directly into the Onboarding Wizard.

Note: Each signup creates a new, separate organization. To join an existing organization, you must use an invite link (see Joining an Organization via Invite Link). There is no way to join an organization by matching the company name -- this is a deliberate security measure.

Google SSO Signup

RWRD supports Google Single Sign-On (SSO) for a faster signup and login experience.

First-time signup via Google:

1. On the authentication screen, click Continue with Google.
2. A Google OAuth popup appears. Select or sign in with your Google account.
3. If this is your first time using RWRD with this Google account, you are taken to the Complete Your Signup screen. Here you provide:
   • Company Name (required) -- The name of your organization.
   • Industry (required) -- Select from the available options.
   • Accept Terms -- Check the box to accept the Terms of Service and Privacy Policy.
4. Click Complete Signup. RWRD creates your organization and takes you into the Onboarding Wizard.

Returning login via Google:

If you have already signed up, clicking Continue with Google signs you directly into your existing account and dashboard. No additional steps are needed.

Tip: Your Google credentials are never stored by RWRD -- authentication is handled entirely through Google's secure OAuth infrastructure.

Signing In to an Existing Account

To sign in:

1. Navigate to the RWRD application URL.
2. Ensure you are on the Sign In tab (this is the default).
3. Enter your email and password.
4. Optionally check Remember me to maintain your session across browser closures.
5. Click Sign In.

If your credentials are incorrect, RWRD displays an error message with a helpful prompt: "Don't have an account? Sign up" -- in case you attempted to log in to an account that does not yet exist.

Password Reset

If you have forgotten your password:

1. On the Sign In screen, click Forgot password? (located below the password field).
2. Enter the email address associated with your account.
3. Click Send Reset Link. RWRD sends a password reset email to that address.
4. Check your email inbox (and spam folder if needed). Click the reset link in the email.
5. The link opens RWRD and presents the Set new password form. Enter your new password (minimum 8 characters) and confirm it.
6. Click Update Password.
7. Upon success, you are signed out automatically. Click Sign In and log in with your new password.

Tip: The reset link redirects you back to the same RWRD URL you originally accessed. If you use RWRD at a custom domain, the link will point there automatically.

Joining an Organization via Invite Link

Administrators can invite team members to join their organization. When you receive an invite link, the process is:

1. Click the invite link (it looks like https://your-rwrd-url.com?invite=TOKEN).
2. RWRD validates the invite token. You will see one of three states:
   • Loading -- "Validating your invite link..." with a spinner.
   • Error -- If the token is invalid or expired, you see "Invite Link Invalid" with an explanation. You can click "Back to Login" to access the regular sign-in screen.
   • Ready -- You see a welcome message showing the company name, who invited you, and the role you have been assigned (e.g., "Jane Smith invited you as a Contributor").
3. Your email address is pre-filled and cannot be changed (it matches the email the invitation was sent to).
4. Create a password (minimum 8 characters) and confirm it.
5. Click Complete Setup.

After setup, invited users skip the onboarding wizard entirely and land directly on the dashboard. Your organization's data is already configured -- you inherit the OKRs, financial metrics, and risk structure set up by the admin.

Invite links expire after 7 days. If your link has expired, ask your administrator to send a new one.

Roles and Permissions

RWRD has three user roles, each with distinct capabilities:

Administrator

• Full access to all features
• Can edit all metrics, OKRs, risks, and KRIs regardless of ownership
• Can add, modify, and delete structural elements (objectives, risk categories, risks)
• Can manage users: invite new members, change roles, deactivate accounts, transfer admin rights
• Can publish dashboard snapshots for Viewers
• Can access and modify Settings (scoring thresholds, strategic context, regional preferences)
• Can generate AI reports and use the AI chat advisor
• Can manage all structural elements (names, targets, thresholds) across the organization

Contributor

• Sees a dedicated Contributor Task List on login showing owned metrics grouped by urgency
• Can update period-specific data (current values, notes, action plans) for metrics they own
• Cannot make structural changes (e.g., cannot change names, targets, thresholds, add new risk categories, delete objectives, or invite users)
• Sees only the task list (not the full dashboard). If also assigned the Viewer role, can toggle to view published snapshots
• Cannot publish snapshots or change settings
• Receives automated email reminders for overdue metric updates

Executive Viewer

• Read-only access to published dashboard snapshots
• Cannot edit any data, change settings, or access unpublished data
• Sees the dashboard as it was at the time of the last publish action
• Can view AI-generated Performance Intelligence Reports based on published data
• Receives email notifications when new dashboards are published

Tip: When an administrator transfers the admin role to another user, the transfer happens in a specific order (the new admin is promoted first, then the original is demoted) to ensure there is always at least one admin in the organization.