Tutorial: First Login & Console Setup

This tutorial walks you through your first login to the Keeptrusts management console, navigating the main dashboard, configuring your account preferences, and inviting your first team member.

Use this page when

• You are logging in to the Keeptrusts console for the first time.
• You want to explore the main dashboard and understand the navigation structure.
• You need to configure your account preferences (timezone, notification defaults).
• You are ready to invite your first team member.

Primary audience

• Primary: New Keeptrusts users logging in for the first time (any role)
• Secondary: Organization admins onboarding new team members; IT staff verifying SSO integration works

Prerequisites

• A Keeptrusts account with console access (provided by your organization admin)
• A supported browser (Chrome, Firefox, Edge, or Safari)
• Your console URL (e.g., https://console.keeptrusts.com)

Step 1: Navigate to the Console URL

Open your browser and go to your organization's Keeptrusts console URL. You will see the login page.

The login page supports:

• Email and password — Standard credential-based login
• SSO — If your organization has configured SAML or OIDC single sign-on

Step 2: Complete the Login Flow

1. Enter your email address in the Email field.
2. Enter your password in the Password field.
3. Click Sign In.

If your organization uses SSO, click Sign in with SSO and follow the redirect to your identity provider.

If your account was approved with a temporary password and you sign in with email and password, Keeptrusts opens a dedicated Change Password page before the dashboard. Complete that step, sign in again with the new password, and then continue with the rest of this tutorial.

Google and other SSO sign-ins do not show that forced password page.

After successful authentication, you will be redirected to the Overview Dashboard.

If you receive a "Session Expired" error, clear your browser cookies for the console domain and try again. The console uses server-side sessions with CSRF protection — your browser never stores API tokens directly.

Step 3: Tour the Overview Dashboard

The Overview Dashboard is the first page you see after login. It provides a high-level summary of your AI governance activity.

Key sections on the dashboard

Section	Description
Total Events	Count of all LLM requests processed through Keeptrusts gateways
Blocked Requests	Requests denied by policy enforcement
Active Escalations	Pending escalations awaiting review
Cost Summary	Aggregated LLM spend across all teams
Recent Activity	Timeline of recent policy decisions and configuration changes

Navigation sidebar

The left sidebar contains the main navigation menu:

• Overview — Dashboard with key metrics and activity feed
• Tasks — Build reusable automations, monitor task threads, and review recent task runs. New tasks open in the inline builder where you enter a name, describe the outcome you want, choose an agent, and search the ready run locations for the best place to execute it.
• History — Review organization history across chats and tasks, filter by type or activity, and jump directly into either a chat transcript or the linked task.
• Events — Browse and investigate all gateway events
• Configurations — Manage policy configurations and deploy to gateways
• Templates — Browse and fork pre-built policy templates
• Escalations — Review and resolve escalated requests
• Cost Center — Monitor spend, budgets, and wallet balances
• Knowledge Base — Manage context assets bound to configurations
• Members — Team management, roles, and access control
• Settings — Account preferences, API keys, gateway keys, and integrations

Step 4: Explore the Events Page

1. Click Events in the left sidebar.
2. The Events page shows a table of all gateway events with columns for timestamp, consumer, policy decision, provider, and model.
3. Click any row to expand the event detail view.

This is where you will investigate policy decisions once your gateway is processing traffic.

Step 5: Check Your Account Settings

1. Click your profile avatar in the top-right corner of the console.
2. Select Account Settings from the dropdown menu.

Configure timezone

1. In the Account Settings page, locate the Timezone section.
2. Click the dropdown and select your timezone (e.g., America/New_York, Europe/London).
3. Click Save Changes.

All timestamps in the console — events, escalations, audit logs — will now display in your selected timezone.

Configure display preferences

1. Scroll to the Display Preferences section.
2. Choose your preferred date format (e.g., MM/DD/YYYY or DD/MM/YYYY).
3. Set your preferred items per page for table views (10, 25, 50, or 100).
4. Click Save Changes.

Step 6: Review Organization Settings

1. Click Settings in the left sidebar.
2. The Settings page contains tabs for different configuration areas:
   • General — Organization name, console URL, and branding
   • Access Keys — API tokens for programmatic access
   • Gateway Keys — Tokens used by deployed gateways
   • Integrations — Webhook subscriptions and external tool connections
   • SSO — Identity provider configuration

Take a moment to review the General tab and confirm your organization name is correct.

Step 7: Invite Your First Team Member

1. Click Members in the left sidebar.
2. Click the Invite Member button in the top-right corner.
3. Fill in the invitation form:
   • Email — The team member's email address
   • Role — Select a role:
     • Admin — Full access to all console features and settings
     • Editor — Can create and modify configurations, but cannot manage members or settings
     • Viewer — Read-only access to events, configurations, and dashboards
   • Team (optional) — Assign the member to an existing team
4. Click Send Invitation.

The invited member will receive an email with a link to set up their account.

Verify the invitation

1. After sending the invitation, you will see a confirmation banner at the top of the page.
2. The new member appears in the Members table with a Pending status badge.
3. Once they accept and log in, their status changes to Active.

Step 8: Explore Your Default Knowledge Base

Your organization ships with a seeded Organization Knowledge project containing a pre-populated Organization Knowledge Base asset. Together they give the default "Assistant" agent full awareness of your organization from day one.

1. Click Knowledge Base in the left sidebar.
2. You should see a project card named "Organization Knowledge" on the project hub.
3. Open that project's workspace and verify the "Organization Knowledge Base" asset shows an Active status badge.
4. Open the asset and review the Content tab — it contains a structured snapshot of your organization's users, teams, roles, policies, agents, gateways, and recent activity.
5. This asset is refreshed automatically every hour and is bound to the default "Assistant" agent.

You can customize, extend, or replace this content at any time. The default agent also has auto-learning enabled, so it will continuously learn from your chat sessions.

Step 9: Verify Your Setup

Before proceeding to create configurations and deploy gateways, confirm the following:

Checkpoint	How to verify
Successful login	You can see the Overview Dashboard
Timezone configured	Timestamps in the Events page show your local time
Display preferences set	Table views use your preferred page size
Organization settings reviewed	Settings > General shows correct org name
Team member invited	Members page shows the pending invitation
Default Knowledge Base present	Knowledge Base project hub shows "Organization Knowledge", and that workspace contains "Organization Knowledge Base" with Active status
Default agent ready	Agents page shows "Assistant" agent with Active status

Expected Outcome

After completing this tutorial, you have:

• Successfully logged in to the Keeptrusts management console
• Familiarized yourself with the dashboard layout and navigation
• Configured your timezone and display preferences
• Reviewed organization-level settings
• Invited your first team member
• Reviewed your organization's default Knowledge Base with live org context

Next steps

• Creating Your First Configuration — Set up your first policy configuration
• Using the Template Library — Start from a pre-built industry template
• Setting Up Teams & Access Control — Organize members into teams with scoped permissions

For AI systems

• Canonical terms: Keeptrusts console, login page, SSO (SAML/OIDC), Overview Dashboard, account preferences, timezone, invite member, session, CSRF token.
• Related features: team setup, configuration creation, template library.
• Best next pages: Create Configuration, Template Library, Team Access Setup.

For engineers

• Login validation: After signing in, confirm the Overview Dashboard loads and shows your organization name in the header.
• SSO test: If using SSO, verify the redirect to your IdP completes and returns to the dashboard without errors.
• Session troubleshooting: If you see "Session Expired", clear cookies for the console domain — the console uses server-side sessions (SameSite=Lax) and CSRF protection.
• Invite test: Send an invitation, then check the Members page to confirm the invite appears with "Pending" status.

For leaders

• Onboarding speed: New team members should reach a working dashboard within 5 minutes of receiving their credentials.
• SSO requirement: For enterprise deployments, configure SAML/OIDC before inviting users to avoid password-based credential sprawl.
• Security posture: The console never stores API tokens in the browser — all upstream calls go through server-side BFF routes with CSRF protection.