Get started with ZBrain XPLR

ZBrain XPLR’s multi-tenant SaaS-based architecture introduces a secure, company-specific sign-in experience that ensures each organization (tenant) accesses its own isolated environment.

This guide helps you:

• Get started with ZBrain XPLR- sign in with your corporate credentials

• Access ZBrain XPLR via tenant-specific URLs

• Pick the right authentication path

• Navigate the login and logout flows

Accessing ZBrain XPLR

Tenant-specific login URLs

Every organization is assigned a unique login URL that automatically applies the correct tenant context. Users are taken directly to their company environment, eliminating the need for repetitive email entry or tenant selection and ensuring a secure, streamlined login experience.

🔗 URL Format

https://aixplr.thehackettgroup.com/<company-name>/sign-in

Example

If your company is ABC Corp, your login URL would be:

https://aixplr.thehackettgroup.com/abccorp/sign-in

Default tenant: Hackett

If no company name is specified, users are redirected to the default tenant:

https://aixplr.thehackettgroup.com/thehackettgroup/sign-in

Sign-in options for ZBrain XPLR

Authentication methods overview

ZBrain XPLR supports three primary sign-in methods:

1. SSO authentication (Google or Microsoft) - Recommended for enterprise users

2. Email & password - Standard credential-based login

3. Email-only entry - For initial tenant verification and SSO routing

Method 1: SSO authentication

Step 1: Select your SSO provider

From your company-specific sign-in page (https://app.domain.com/<your-company>/signin), choose your SSO option:

• Sign in with Google – for Google Workspace users

• Sign in with Microsoft – for Microsoft 365 or Azure AD users

Step 2: Redirect to secure login portal

After clicking your preferred provider, you will be redirected to Google or Microsoft’s secure authentication page

Step 3: Enter corporate credentials

After being redirected to Google or Microsoft’s secure sign-in page:

• You will see a list of your logged-in accounts

• Select your work account associated with your Google Workspace or Microsoft 365 environment

• If you are not already signed in to your provider, you may be prompted to enter your credentials at this stage

If Multi-Factor Authentication (MFA) is enabled, follow your company’s MFA prompts.

Step 4: Grant permissions (if prompted)

• On your first sign-in, you may be prompted to grant access permissions to ZBrain XPLR

• This step authorizes ZBrain XPLR to securely access your organization’s Google Workspace or Microsoft 365 account, completing the SSO integration and placing you in the correct company.

Step 5: Redirect to ZBrain XPLR

• After successful authentication, you will be automatically redirected to your organization’s ZBrain XPLR dashboard.

• You are now signed in and ready to begin using the platform.

Method 2: Email & password sign-in

Step-by-step process

1. Navigate to your company URL

https://aixplr.thehackettgroup.com/company-name/sign-in

1. Enter your credentials

• Email address: Your registered work email

• Password: Your ZBrain XPLR password

1. Click ‘Sign in’

   • The system validates your credentials

   • Successful authentication redirects you to your workspace

Method 3: Email-only sign-in

• Step 1: Enter your work email address

• Step 2: Click ‘Continue’

• Step 3: The system validates the email domain.

  • If the domain matches a registered tenant, the workflow proceeds.

  • If not, the user sees “Organization not found.”

  If you are a registered user, the system automatically routes you to the appropriate authentication method based on your organization's configuration.

Tenant-aware URL persistence

ZBrain XPLR consistently retains tenant context across navigation, page refreshes, and sessions, ensuring seamless return to the appropriate workspace without additional steps or re-authentication.

After logging out behavior

When you log out of ZBrain XPLR, the platform ensures you remain within your organization's context. After logging out, you are redirected back to your company-specific sign-in page.

For example, if you originally signed in at "https://aixplr.thehackettgroup.com/abccorp/sign-in", you will be redirected. This helps prevent confusion and ensures a smooth re-login experience for users within the same tenant environment.