[Yandex Cloud documentation](../../../index.md) > [Yandex Identity Hub](../../index.md) > [Step-by-step guides](../index.md) > [Managing a user account](index.md) > First login to the console

# First-time login to the console

If invited to a Yandex Cloud [organization](../../concepts/organization.md), accept the invitation and proceed to your first-time login to the [management console](../../../console/quickstart/console.md). The login procedure depends on your [account type](../../../iam/concepts/users/accounts.md).

{% list tabs group=instructions %}

- Yandex account users {#passport-user}

  To log in to the management console with a [Yandex account](../../../iam/concepts/users/accounts.md#passport):

  1. Open the invitation email.
  1. In the email, click **Accept invitation**.
  1. On the page that opens, click **Accept**.
  1. Select a Yandex account to log in or log in to an existing account.
  1. Navigate to the [management console](https://console.yandex.cloud).
  1. If your organization has a [mandatory two-factor authentication policy](../enable-2fa-access.md) in place, you will be prompted to set up a [second factor](../../concepts/mfa.md). Select the login authentication method available to you:

     {% note info %}
     
     The 2FA setup period is limited. Once it expires, access to the console will be blocked and can only be restored by the organization administrator. For more information, see [Troubleshooting](troubleshooting.md#mfa-timeout).
     
     {% endnote %}

     {% list tabs %}
     
     - Authenticator app {#app-auth}
     
       1. Select **Authenticator app**.
       1. Use an application or service to generate one-time codes, for example:
     
          * [Yandex ID](https://yandex.ru/id/about)
          * [Google Authenticator](https://support.google.com/accounts/answer/1066447)
          * [Microsoft Authenticator](https://www.microsoft.com/ru-ru/security/mobile-authenticator-app)
          * [Multifactor](https://multifactor.pro/docs/saml/yandex-cloud-2fa/)
       1. Open the app and scan the QR code displayed on the screen.
       1. Enter the code from the app in the **Confirmation code** field.
       1. Click **Confirm**.
     
     - Security key {#key-auth}
     
       1. Select [Security key](../../../vpc/concepts/security-groups.md).
       1. Plug in a hardware security key, e.g., [Rutoken](https://www.rutoken.ru/) or [JaCarta](https://www.aladdin-rd.ru/catalog/jacarta), to your computer.
       1. Follow the prompts in your browser to register the key.
       1. Click **Confirm**.
     
     - Biometrics {#bio-auth}
     
       1. Select **By face or fingerprint**.
       1. Follow the prompts in your browser to set up biometric authentication.
       1. Click **Confirm**.
     
     {% endlist %}

  Once you have successfully set up your second factor, you will be redirected to the management console.

- Local users {#local-user}

  [Local users](../../../iam/concepts/users/accounts.md#local) are created by the administrator in the organization's [user pool](../../concepts/user-pools.md). When creating an account, the administrator sets a login and temporary password, which are then shared with the user. You must change your password on your first login.

  To log in to the [management console](../../../console/quickstart/console.md) for the first time:

  1. Go to the [management console](https://console.yandex.cloud) page.
  1. Enter the login and temporary password you got from the organization administrator.
  1. You will be prompted to change the password:
     1. Enter your new password twice.
     1. Click **Save password**.
  1. If your organization has a [multi-factor authentication](../../concepts/mfa.md) policy in place for local users, you will need to set up a second factor the first time you log in. Select the login authentication method available to you:

     {% note info %}
     
     The 2FA setup period is limited. Once it expires, access to the console will be blocked and can only be restored by the organization administrator. For more information, see [Troubleshooting](troubleshooting.md#mfa-timeout).
     
     {% endnote %}

     {% list tabs %}
     
     - Authenticator app {#app-auth}
     
       1. Select **Authenticator app**.
       1. Use an application or service to generate one-time codes, for example:
     
          * [Yandex ID](https://yandex.ru/id/about)
          * [Google Authenticator](https://support.google.com/accounts/answer/1066447)
          * [Microsoft Authenticator](https://www.microsoft.com/ru-ru/security/mobile-authenticator-app)
          * [Multifactor](https://multifactor.pro/docs/saml/yandex-cloud-2fa/)
       1. Open the app and scan the QR code displayed on the screen.
       1. Enter the code from the app in the **Confirmation code** field.
       1. Click **Confirm**.
     
     - Security key {#key-auth}
     
       1. Select [Security key](../../../vpc/concepts/security-groups.md).
       1. Plug in a hardware security key, e.g., [Rutoken](https://www.rutoken.ru/) or [JaCarta](https://www.aladdin-rd.ru/catalog/jacarta), to your computer.
       1. Follow the prompts in your browser to register the key.
       1. Click **Confirm**.
     
     - Biometrics {#bio-auth}
     
       1. Select **By face or fingerprint**.
       1. Follow the prompts in your browser to set up biometric authentication.
       1. Click **Confirm**.
     
     {% endlist %}

  Once you have successfully set up your second factor, you will be redirected to the management console.

- Federated users {#federated-user}

  [Federated users](../../../iam/concepts/users/accounts.md#saml-federation) authenticate through an external identity provider. The organization administrator sets up an [identity federation](../../concepts/add-federation.md) and adds users.

  To log in to the [management console](../../../console/quickstart/console.md) for the first time:

  1. Go to the [management console](https://console.yandex.cloud) page.
  1. Click **Log in via SSO**.
  1. Enter the federation ID provided by your administrator.
  1. Click **Next**.
  1. You will be redirected to your IdP login page, e.g., your company portal.
  1. Enter the credentials you use in your organization (your corporate login and password).
  1. You will be prompted to change the password:
     1. Enter your new password twice.
     1. Click **Save password**.
  1. If your organization has a [multi-factor authentication](../../concepts/mfa.md) policy in place for federated users, you will need to set up a second factor the first time you log in. Select the login authentication method available to you:

     {% note info %}
     
     The 2FA setup period is limited. Once it expires, access to the console will be blocked and can only be restored by the organization administrator. For more information, see [Troubleshooting](troubleshooting.md#mfa-timeout).
     
     {% endnote %}

     {% list tabs %}
     
     - Authenticator app {#app-auth}
     
       1. Select **Authenticator app**.
       1. Use an application or service to generate one-time codes, for example:
     
          * [Yandex ID](https://yandex.ru/id/about)
          * [Google Authenticator](https://support.google.com/accounts/answer/1066447)
          * [Microsoft Authenticator](https://www.microsoft.com/ru-ru/security/mobile-authenticator-app)
          * [Multifactor](https://multifactor.pro/docs/saml/yandex-cloud-2fa/)
       1. Open the app and scan the QR code displayed on the screen.
       1. Enter the code from the app in the **Confirmation code** field.
       1. Click **Confirm**.
     
     - Security key {#key-auth}
     
       1. Select [Security key](../../../vpc/concepts/security-groups.md).
       1. Plug in a hardware security key, e.g., [Rutoken](https://www.rutoken.ru/) or [JaCarta](https://www.aladdin-rd.ru/catalog/jacarta), to your computer.
       1. Follow the prompts in your browser to register the key.
       1. Click **Confirm**.
     
     - Biometrics {#bio-auth}
     
       1. Select **By face or fingerprint**.
       1. Follow the prompts in your browser to set up biometric authentication.
       1. Click **Confirm**.
     
     {% endlist %}

  Once you have successfully set up your second factor, you will be redirected to the management console.

{% endlist %}

You now have access to the organization and its resources for which the administrator has granted you permissions.

## What's next {#what-is-next}

* [Managing your profile in the My account portal](../manage-account.md)
* [Troubleshooting login issues](troubleshooting.md)
* [Managing login authentication methods](../manage-account.md#manage-mfa)

#### See also {#see-also}

* [My account portal](../../concepts/my-account.md)
* [Multi-factor authentication in Yandex Identity Hub](../../concepts/mfa.md)
* [User account types](../../../iam/concepts/users/accounts.md)