SSO & Sessions

1st Flock uses single sign-on (SSO) so you only need to log in once to access all apps on the platform. Whether you're switching from Church Management to Finance, checking your Billing dashboard, or browsing the Help Center, your session follows you seamlessly.

How Single Sign-On Works

When you sign in through the authentication page, a secure session is established that all 1st Flock apps recognize. This session is managed using secure HttpOnly cookies — a type of cookie that cannot be read or modified by browser scripts, providing strong protection against cross-site scripting attacks.

When you navigate to another 1st Flock app, it checks for your active session. If you're already signed in, you're granted access immediately without seeing a login screen. If your session has expired, you'll be redirected to sign in again.

Session Duration

Your session remains active as long as you're using 1st Flock apps. Sessions expire after a period of inactivity to protect your account. When your session expires, you'll be redirected to the login page the next time you interact with any app. Simply sign in again to start a new session.

Signing Out

To sign out, click the logout option available in any 1st Flock app. Signing out ends your session across all apps — you'll need to sign in again to access any of them. This is important when using a shared or public computer.

When you sign out:

• Your secure session cookie is cleared
• Your locally stored tokens are removed
• You're redirected to the login page

Multiple Churches

If your account is associated with more than one church, you select which church to work with after signing in. Your authentication session applies to your personal account, not a specific church, so switching churches does not require signing in again.

Security Considerations

• Shared computers: Always sign out when you're done using a shared or public computer. Closing the browser tab alone may not end your session.
• Social sign-in sessions: If you signed in with Google, Amazon, or Apple, signing out of 1st Flock does not sign you out of your social provider. This is by design — your social account session is managed independently.
• Suspicious activity: If you notice unfamiliar sign-in activity, change your password immediately and enable multi-factor authentication if you haven't already. Contact support@1stflock.com if you believe your account has been compromised.