Authentication and Security
Learn how to manage user access, permissions, and secure your documentation spaces in Next Step Conrad.
Overview
Next Step Conrad provides robust authentication and security features to protect your project documentation. You can manage user access through multiple login methods, assign role-based permissions, generate API tokens for integrations, and configure encryption settings. These tools ensure secure collaboration across teams while maintaining data privacy.
Enable multi-factor authentication (MFA) for all team members to add an extra layer of security.
Authentication Methods
Next Step Conrad supports several login options. Choose the method that best fits your team's needs.
Use your email and password to log in at https://nextstepconrad.com/login.
// Example login request
const response = await fetch('https://api.nextstepconrad.com/auth/login', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
email: 'user@example.com',
password: 'your-password'
})
});
Connect your Google account for seamless single sign-on.
- Visit
https://nextstepconrad.com/auth/google. - Authorize the app.
- Return to your dashboard.
After initial login, enable MFA in account settings.
Enable MFA
Go to Account > Security.
Scan QR Code
Use your authenticator app to scan the code.
Verify
Enter the 6-digit code to confirm.
Role-Based Permissions
Assign roles to control access to documentation spaces. Use the admin dashboard to manage permissions.
Admin
Full access: Create, edit, delete spaces and manage users.
Editor
Edit documents and invite collaborators.
Viewer
Read-only access to content.
Custom
Define granular permissions per space.
API Token Generation
Generate secure API tokens for integrations like CI/CD pipelines or third-party tools.
Navigate to Tokens
Go to Account > API Tokens.
Create Token
Click New Token, select scopes (read, write).
Copy Token
Copy the generated token immediately—it won't be shown again.
Use the token in requests:
const response = await fetch('https://api.nextstepconrad.com/docs', {
headers: {
'Authorization': `Bearer ${YOUR_API_TOKEN}`
}
});
import requests
headers = {'Authorization': f'Bearer {YOUR_API_TOKEN}'}
response = requests.get('https://api.nextstepconrad.com/docs', headers=headers)
curl -H "Authorization: Bearer YOUR_API_TOKEN" https://api.nextstepconrad.com/docs
Bearer token format: Bearer YOUR_API_TOKEN.
Filter docs by space ID.
Security Best Practices
Never share API tokens in public repositories or client-side code. Rotate tokens regularly and use the principle of least privilege for permissions.
Data Encryption and Privacy
All data in Next Step Conrad is encrypted at rest using AES-256 and in transit with TLS 1.3. You control privacy settings per space.
Troubleshooting Access Issues
Common issues and fixes:
| Issue | Solution |
|---|---|
| Login fails | Reset password at https://nextstepconrad.com/reset. |
| Token expired | Generate a new token in settings. |
| Permission denied | Check role assignments in space settings. |
| MFA not working | Verify time sync on your device. |
If issues persist, contact support at support@nextstepconrad.com.