Skip to main content
ModelHub has no passwords to remember. You sign in with a one-time code sent to your email, or with your company’s Okta single sign-on (SSO) when your organization has set it up. Either way, your email has to be approved by your organization before you can get in.

​
The sign-in screen

Open modelhub.corepillar.ai. Any page you request while signed out sends you to the sign-in card titled CorePillar, and remembers where you were going so you return there afterwards. The card starts with one field, Email. What appears under it depends on your email:
Password sign-in and the “organization slug” Okta form are turned off in the current build. The only methods on the sign-in card are the email code and the SSO buttons described here.

​
Option 1: email code

1

Request a code

Enter your email and click Send me a code (or Email me a code). Pressing Enter in the email field first checks for SSO; it only sends a code if your email has no SSO option.On success the card says “We emailed you a 6-digit code. Enter it above.” and switches to the code step.
2

Enter the code

Type the code into 6-digit code and click Verify & sign in. Spaces are ignored. Anything that is not exactly six digits is rejected with “Enter the 6-digit code we emailed you.”
3

Wrong address?

Click Use a different email to go back to the email step.
The first time an approved email signs in with a code, CorePillar creates the account automatically. You do not need to sign up first.

​
Option 2: single sign-on (Okta)

The SSO button appears only when your email is already a member of, or has a pending (unexpired) invite to, an organization that has SSO configured. CorePillar does not match on email domain. The lookup is rate limited to 30 checks per minute per network address. Clicking the button takes you to your company’s Okta sign-in, then back to ModelHub. On the first SSO sign-in your membership is created or updated automatically, with a role taken from your Okta groups or the organization’s default SSO role. Administrators configure this in SSO (Okta). If SSO fails you return to the sign-in card with one of these messages:

​
Why your email must be approved

Nobody can sign in with an email code until their address is approved. This is separate from being invited to an organization and it comes first.
  • When an unapproved email asks for a code, the card shows “Your access is pending approval by an administrator.” and CorePillar records a pending access request for that address.
  • Your organization’s super admins approve addresses one at a time or a whole domain at once, in Platform access.
  • A per-address decision always wins: an approved address gets in without a domain rule, and a denied address stays out even when its domain is approved.
  • If the approval list cannot be read, sign-in is denied rather than allowed.
In the current build the approval check runs on the email-code path. Okta sign-in relies on your assignment to the CorePillar app in Okta and on the organization’s SSO configuration.
If your organization enforces SSO and you try to request a code, you see: “Your organization (your-org-slug) requires single sign-on. Use “Continue with SSO” above.” The button to use is the Sign in with SSO button on the same card.

​
Accepting an invite

Administrators add people to an organization from User Management in settings. Each invite produces a link of the form https://modelhub.corepillar.ai/invite/ followed by a token. Invites expire after 7 days.
  1. Open the invite link. If you are signed out you are sent to sign in first, then brought back to the link.
  2. CorePillar accepts the invite and adds you to the organization with the role the invite carries.
  3. You are taken into the organization and land on the chat.
The invite can fail with:

​
Where you land after signing in

ModelHub chooses your starting point automatically:
  1. Organization. If you belong to an organization with the slug my-organization, that one. Otherwise the first organization you belong to.
  2. Project. The first project in that organization that has at least one model connected. If none has a model, the first project.
  3. Page. The chat.
If you belong to no organization at all you are taken to onboarding instead. If you see “No models available yet”, the project you landed on has no models; use the project switcher in the header to try another project, or ask an administrator. You can always change organization or project later with the switcher in the header. See Settings and profile.

​
Signing out

Click your name at the bottom of the sidebar and choose Sign out.