Logging In
All Tiers
Login Methods by Tier
| Tier | Method | Provider |
|---|---|---|
| Starter | Username + Password | Built-in basic auth |
| Professional | SSO — OAuth2 PKCE | AWS Cognito |
| Enterprise | SSO — SAML 2.0 | Your IdP (Okta, Azure AD, etc.) via Cognito federation |
First-Time Login
- Navigate to your Calabi URL (e.g.,
calabi.{yourdomain}) - You are redirected to the login page automatically
- Starter: Enter username and password provided by your admin
- Professional/Enterprise: Click "Sign in with SSO" → redirected to Cognito → sign in with your company credentials
One login, all modules
After signing in, your session cookie (.{yourdomain} domain) covers every Calabi module — Catalogue, Calabi Pipelines, Calabi ML, AI Builder, etc. No separate logins.
Forgot Password
- Starter: Contact your Calabi admin to reset via Settings → Users
- Professional/Enterprise: Use your SSO provider's self-service password reset
Session & Cookie
Calabi uses a SameSite=None; Secure session cookie so embedded iframes also authenticate automatically. Sessions expire after 8 hours of inactivity (configurable by admin).