Sign in

Spend does not have its own passwords. You sign in with the account your organization already gives you.

With single sign-on

1. Go to your agency’s Spend address and choose Sign in through your organization.
2. Your identity provider (Microsoft Entra ID, Okta, Ping, ADFS or Google Workspace) asks you to sign in, and may ask for a second factor.
3. You land on My work.

Only people your administrators have set up can sign in. If you see “not set up” or “refused”, ask your Spend administrator to add you or give you a role. Sessions last 8 hours by default; Sign out in the top-right menu ends yours on the server straight away.

With a passkey

On a phone or a laptop with Face ID, a fingerprint reader or Windows Hello, you can add a passkey in Settings after your first sign-in (Passkeys, then Add a passkey). Next time, sign in with it from the sign-in page. Passkeys are tied to your agency’s Spend address, so they cannot be used on a look-alike site.

The sandbox

The sandbox has organizations filled with synthetic data, so you can try Spend without touching real records. The sign-in page lists the sandbox organizations and their storylines: each one signs you in as the right person and opens the record that tells the story, such as an invoice held for a bank mismatch or a sealed bid waiting to be opened.

Everything in the sandbox is invented: people, suppliers and amounts. Email addresses use .example domains.