Your first workspace

A workspace is your organization's tenant of AxisSynapse — its own URL, its own brand, its own users, and its own data. The first sign-in to a fresh workspace runs you through a four-step setup wizard: name + URL, modules, branding, and the first three teammates. This guide walks you through every step so the workspace is ready for production by the time you finish reading.

TL;DR — Pick a name, accept the suggested subdomain, enable the modules you'll actually use, drop your logo on the branding step, invite three teammates, and click Finish. The whole flow takes about eight minutes for the first-time admin.

Before you start

• Have your organization's legal name ready — it appears on every audit export, every invoice, and every formal communication.
• Pick a subdomain ahead of time (e.g. acme, acme-international). It becomes the prefix of your workspace URL and is hard to change later without losing existing sign-in bookmarks; we recommend something short and unambiguous.
• Have your logo ready as PNG or SVG. The light- and dark-mode variants both upload here; if you only have one, AxisSynapse uses it for both and you can add the dark variant later.
• Decide which modules you'll roll out first. You can enable more later, but the home dashboard layout is friendlier when only your active modules light up.
• Know which identity provider (if any) your organization uses for single sign-on. You can defer SSO setup, but most admins configure it during the first session.

Create the workspace

1. 1

   Click the workspace-creation link

   The marketing site's Get started button and the invite email your AxisSynapse account team sends both land on the same page: the workspace-creation form. You can also reach it from axissynapse.com/start.

2. 2

   Pick a name and subdomain

   Type the organization's legal name in the Workspace name field. As you type, AxisSynapse suggests a subdomain — accept it or override it. The Workspace URL preview shows the final address (<your-subdomain>.axissynapse.com).

3. 3

   Pick a region

   Choose where your workspace data lives. AxisSynapse offers US, EU, UK, and Canada regions to satisfy data-residency requirements. The region cannot be changed after creation — pick the one that matches your regulatory posture.

4. 4

   Confirm and create

   Click Create workspace. AxisSynapse provisions the tenant (usually under a minute) and signs you in as the first workspace admin.

Enable the modules you'll use

The module selector decides which areas of the platform appear in your workspace's navigation. Disabled modules don't appear and don't incur the admin overhead of empty surfaces.

1. 1

   Open the Modules wizard step

   After workspace creation the wizard advances to Modules. Each module is a card with its label, a one-line description, and a toggle.

2. 2

   Toggle the modules to enable

   Click any card to enable it. The module appears in the left rail as soon as you toggle it on. The cards remember your choices if you back out and return.

3. 3

   Click "Continue"

   The wizard advances to Branding. Modules you skipped can be enabled later from Settings → Modules.

Brand your workspace

The branding step ships visible defaults; you can return to Branding your workspace to refine them whenever you like.

1. 1

   Upload your logo

   Drag a PNG, SVG, or JPG onto the Light logo dropzone, then optionally a dark variant onto Dark logo. The sign-in page preview updates live.

2. 2

   Pick an accent color

   Click a swatch from the palette, or click Custom to enter a hex value. The accent color drives the primary button, the sign-in link, and the active-state highlight throughout the workspace.

3. 3

   Set the sign-in subtitle

   A one-line message that appears under the workspace name on the sign-in card. Most workspaces leave the default; a few use it for a compliance reminder.

Invite the first three teammates

Every workspace needs at least one other admin — you don't want a single point of failure on access to your tenant. The wizard deliberately asks for three invites so you avoid the bus-factor problem from day one.

1. 1

   Enter the three emails

   Type each teammate's email in the three input rows. As you type, AxisSynapse validates the domain and suggests a role.

2. 2

   Pick a role per invitee

   Each row has a role dropdown defaulted to Member. Promote at least one of the three to Workspace admin so you have a co-admin from day one.

3. 3

   Click "Send invites"

   AxisSynapse sends each invitee an email with their personalised sign-up link. Invites are valid for 14 days; expired invites can be resent from Settings → Members.

Every field, explained

After the wizard

1. 1

   Configure single sign-on

   Almost every workspace turns on SSO during the first day. Head to Configure single sign-on for the end-to-end walkthrough for Microsoft Entra ID, Okta, Google Workspace, Auth0, OneLogin, or any other SAML 2.0 provider.

2. 2

   Set your MFA policy

   Decide whether MFA is required, what factors are acceptable (e.g. require WebAuthn for executive accounts), and what grace period new users get. See Multi-factor authentication policy.

3. 3

   Wire up SCIM for directory sync

   If your organization runs more than a few dozen users, plug AxisSynapse into your directory (Microsoft Entra ID, Okta, etc.) so lifecycle events propagate automatically. See SCIM provisioning.

4. 4

   Decide on a network policy

   Allowlisting your corporate IP ranges (and optionally blocklisting others) limits exposure if a credential is ever compromised. See Network policy.

5. 5

   Audit-log retention

   Pick how long each category of audit lines is kept. The defaults honor every jurisdiction floor; tighten them up only if your legal department asks. See Audit-log retention.

What appears in the audit log

The workspace-creation flow records a handful of foundational lines — the audit trail begins at minute one.

• TENANT_MFA_POLICY_UPDATED — recorded the first time you confirm or change the workspace's MFA policy, even if you accept the defaults.
• TENANT_NETWORK_POLICY_UPDATED / TENANT_SAML_PROVIDER_CREATED / TENANT_AUDIT_RETENTION_POLICY_UPDATED — recorded as you complete the post-wizard setup recommended above.

The workspace-creation event itself is recorded against the platform billing surface, not the workspace audit log (the workspace does not exist yet when it is created).

Common gotchas

• "My preferred subdomain is taken." Subdomains are globally unique across AxisSynapse. Append your country code or a short qualifier (acme-us, acme-emea) — or pair with a custom domain later.
• "I picked the wrong region." Region cannot be changed after creation. If you realize within the first 24 hours, contact your account team — they can re-provision a fresh workspace at the same name. After 24 hours the data must be migrated.
• "My logo looks blurry." Upload a 2× density asset (480px wide for a 240px-rendered logo) so retina displays render crisply.
• "I forgot to promote a co-admin." Open Account → Active sessions to confirm you're still signed in, then go to Settings → Members, promote a teammate, and verify the promotion appears in the audit log.
• "The invite emails didn't arrive." Ask the invitees to check spam. If they still don't see it, resend from Settings → Members and verify the email address. AxisSynapse sends from notifications@axissynapse.com — allowlist that domain in your mail filter if your organization has aggressive filtering.

Troubleshooting

| Error code | What it means | Fix | |---|---|---| | WORKSPACE_SUBDOMAIN_TAKEN | The subdomain is already in use. | Pick a different subdomain. | | WORKSPACE_NAME_INVALID | Name contains characters that can't be displayed safely. | Keep the name to plain Unicode letters, digits, and spaces. | | INVITE_EMAIL_INVALID | The invitee's email doesn't parse. | Double-check the address. | | MODULE_TIER_INSUFFICIENT | You tried to enable a module that requires a higher plan tier. | Upgrade the workspace's plan, or skip the module for now. |