One sign-in for everything

Kreativlo uses centralised sign-in: your password is only ever typed at one address, and every other application trusts the result.

What you experience

You open kreativstaff.kreativlo.com. If you are not signed in, the screen moves to sso.kreativlo.com — but the colours, logo, and feel stay Kreativstaff. After entering your password you land back where you started.

On your next visit that form does not appear at all. You go straight in.

Why not a sign-in form on each application?

This is a security decision, not a shortcut.

One address is easier to guard. If six applications all asked for a password, you would have to remember six legitimate addresses. An impostor only needs to imitate one of them. With a single address the rule is simple and has no exceptions:

A rule with no exceptions

Your Kreativlo password should only ever be typed at sso.kreativlo.com.

Any other page asking for it — even with an identical logo — is not ours.

Signing out really signs you out. Because there is one session, pressing sign out ends access to every application at once. With per-application sessions you would have to sign out six times and would easily leave one open.

Changes take effect immediately. When an administrator revokes someone's access, that revocation applies across every module, not just where they last signed in.

Why does the sign-in page change colour?

The sign-in page adapts to the application you were heading for: logo, accent colour, and typeface follow Kreativstaff if you came from Kreativstaff.

This is not decoration. Moving from a Kreativstaff-coloured page to a sign-in page that looks foreign makes people doubt whether they are still in the right place — and that doubt is exactly what fake pages exploit. Only the appearance changes; the address and the system checking your password stay the same.

Moving between applications without signing in again

From the portal, click any module in the launcher. You go in without typing anything.

Behind the scenes the portal issues a single-use pass with a very short life, valid only for the application you are heading to. A pass for Kreativstaff cannot be used to open Finara.

Why a company picker sometimes appears

If your account belongs to several companies that all subscribe to the application you are opening, Kreativlo does not guess. It asks first, because opening the wrong company means seeing the wrong data.

If only one of them subscribes, you go straight there — even if another company was registered earlier.

Two-step verification

Your company can require an extra code sent to your email at every sign-in. When enabled, you will be asked for it after your password.

This is set by the company administrator, not by you.

Signing in with Google

If your company allows it, you can sign in with a Google account instead of a password. The flow is the same: you still end up at the Kreativlo portal, and the target application still receives its pass from there.

How long a session lasts

Your choice at sign-in	Session lasts
"Remember me" ticked	Up to 7 days, even after closing the browser
Not ticked	Ends when the browser closes

Do not tick "Remember me" on a shared computer.

When something goes wrong

What you experience	Likely cause	What to do
Asked to sign in repeatedly	The browser refuses cookies	Enable cookies; leave private browsing
"Session expired" when switching apps	The pass lapsed before it was used	Return to the portal and click the module again
Signed in, but the app refuses	The company does not subscribe to it	Modules à la carte
The sign-in page keeps appearing though you are signed in	A stale session is lingering	Sign out completely, then sign in again