Profile and sign-in | kanman documentation

Your profile is how you appear to the rest of your workspace: next to the decisions you answer, the stories you approve and the entries in the audit log. The same page holds how you sign in and your data. How kanman protects your code and data is described in Security and data.

Opening your settings

Click your avatar at the top right.
Choose Your settings. Your personal settings open on Profile and sign-in (/account/profile).

Your personal settings have five pages: Profile and sign-in, Look and feel, Notifications, Keyboard shortcuts and, under Developer, API tokens. They apply to you in every workspace. Every setting saves as soon as you change it: a short Saved appears next to it, and Undo in the message at the bottom brings the previous value back for a few seconds. There is no Save button.

Old links to the former Security page open this page at the Sign-in card.

Display name

Your display name appears in the member list, on decisions you answered, on stories you approved or rejected, and in the actor column of the audit log and its export.

Edit Display name. It is saved when you leave the field or press Enter. A display name can’t be empty.

Use your real name. Auditors and teammates need to know who approved what.

Picture

Your picture appears in the top bar, in member lists and next to your activity. kanman appears with its own avatar in the same places, so it is always clear who acted.

To change it:

Click your picture (the round avatar). Change appears over it when you point at it or move to it with the keyboard.
Choose an image, move and zoom it to fit the circle and click Apply crop. Your new picture is saved right away.

kanman stores a small, compressed version of the image. Square images look best. If the file is not a picture or can’t be cropped, the dialog says so and you can choose another one.

To remove it, click Remove avatar. Your initial is shown instead; Undo brings the picture back.

The Sign-in card shows the email address you sign in with and lets you change it and your password.

Email address

Next to Email, click Change.
Enter the New email address and click Send link.
kanman shows Check your inbox. Open the link in the email to finish the change.

If the link doesn’t arrive, click Send again. An address that isn’t valid, or the one you already use, is pointed out under the field. If your workspace uses single sign-on, your email address is managed by your identity provider.

Password

Next to Password, click Change.
Enter the New password. Use the eye in the field to see what you typed; a short line under the field rates the length.
Click Save password.

A password needs at least six characters. We recommend twelve or more, or a short phrase, and a password manager.

Signing in

Open app.kanman.ai. kanman offers the ways in that fit your email address:

Password: enter your email address and password and tap Sign in. On a phone, Next on the keyboard moves from the email to the password and Go signs you in. Use Show password (the eye in the field) to check what you typed.
Sign-in link: enter your email address and tap Email me a sign-in link. Open the link in the email on the same device and you are signed in, no password needed. You can ask for a new link after a minute with Send again.
Single sign-on: if your company signs in through its identity provider, Continue with SSO appears as soon as you have entered your work email address. When your company requires it, the password and the sign-in link are not offered.

Password managers such as iCloud Keychain, Google Password Manager, 1Password and Bitwarden fill in the form and offer to save the password. kanman remembers the email address of the last sign-in on this device, so next time you only need the password.

Forgotten password

Open app.kanman.ai and click Forgot your password?
Enter your email address and click Send reset link.
Open the link in the email and set a new password.

If you only need to get in quickly, Email me a sign-in link on the sign-in page works without resetting your password.

Single sign-on

If your workspace uses single sign-on (Workspace settings > Single sign-on), you sign in through your company’s identity provider. Password, multi-factor rules and session length are then set by your identity provider. Admins setting up OpenID Connect enter the client secret once: kanman stores it and never shows it again. To keep it, leave the field as it is when you change other settings; to rotate it, enter the new secret. Save stores everything the tabs show, including the attribute mapping, the role of new members and every email domain. Test connection saves pending changes first and then checks the stored configuration. To remove single sign-on, use Delete configuration at the end of the page; it asks first.

API tokens

API tokens act on your behalf, so treat them like passwords. You create and revoke them in Your settings > API tokens.

Give each integration its own token with a clear name.
Grant only the permissions it needs (Read and Write are chosen for a new token; at least one is required), and set a short expiry.
Revoke tokens you no longer use.
Never put tokens into a repository, a story or an acceptance criterion.

See Authentication for permissions and expiry rules.

If something looks wrong

If you notice activity you do not recognise:

Change your password.
Review and revoke your API tokens.
Tell your workspace admin, who can check the audit log for actions taken in your name.

Your data

Your data at the end of the page folds open with two things: downloading your data and deleting your account.

Exporting your data

Open Profile and sign-in and unfold Your data.
Click Download my data.

You get a JSON file named kanman-export-<date>.json, readable by people and machines. It contains your profile, your preferences, your workspace memberships with your role in each, your comments, the decisions you answered and the audit log entries where you are the actor. Each export is recorded in the audit log of every workspace you belong to.

Team data (stories, runs, evidence, the full audit log) belongs to the workspace and is not part of your export; owners and admins export the audit log from the audit page. See Audit export format.

Deleting your account

Open Profile and sign-in and unfold Your data.
Under Delete account, click Delete account.
Type your email address and click Delete my account.

Deletion is blocked while something would break for other people. kanman lists what to do first:

You are the only owner of a workspace with other members. Each such workspace links to its members page, where you make one of its admins the owner (see Transferring ownership).
A team other people work in uses a git, tracker or Slack connection you set up. Ask an admin of the workspace to connect that team with their own account.

What happens when you delete your account:

You leave every workspace and can no longer sign in.
Your profile, preferences, notifications, personal API tokens and your own connections are deleted.
Workspaces that only you use are deleted with your account; the confirmation lists them. They are erased for good after 30 days, see Retention and deletion.
Your comments and the decisions you answered stay in their teams without your name.
The audit logs keep what happened, because an audit trail must show who did what, but your name is replaced by a pseudonym such as deleted-user-1a2b3c4d, and each workspace records the deletion.
You get a confirmation email, are signed out and land on the sign-in page.

Deleting your account cannot be undone. Download your data first if you want to keep a copy.

Reporting a vulnerability

If you find a security issue in kanman, write to [email protected] with a description and steps to reproduce. Please do not publish it before it is fixed. We answer every report.