Access your workspace¶
Access your Mattermost instance with your credentials using a web browser, the desktop app, or the mobile app for iOS or Android. Depending on how Mattermost is configured, you’ll log in using your email address, username, or single sign-on (SSO) username, and your password. See the Client availability documentation to learn which features are available on different Mattermost clients.
Tip
Can’t find your Mattermost link? Ask your company’s IT department or your Mattermost system admin for your organization’s Mattermost Site URL. It’ll look something like https://example.com/company/mattermost, mattermost.yourcompanydomain.com, or chat.yourcompanydomain.com. These URLs could also end in .net.
Web browser¶
Open a supported web browser.
Copy and paste the Mattermost server link into the browser’s address field.
Enter your user credentials to log into Mattermost.
Bookmark the Mattermost URL in your web browser of choice so logging into Mattermost is easy in the future.
Desktop app¶
Download and install the Mattermost desktop app from the App Store (macOS), Microsoft Store (Windows), or by using a package manager (Linux).
When prompted, enter the Mattermost server link and a display name for the Mattermost instance. The display name is helpful in cases where you connect to multiple Mattermost instances. See the server connections documentation for details.
Enter your user credentials to log into Mattermost.
The team that displays first in the team sidebar opens. If you’re not a member of a team yet, you’re prompted to select a team to join.
Note
When you log into Mattermost using external user credentials, such as Google or Entra ID, you’ll temporarily leave the desktop app during login while authenticating your credentials. Once you’re successfully logged in to Mattermost, you’ll be returned to the desktop app. See the Single Sign-On (SSO) section below for details on the external providers that Mattermosts supports.
Download and install the Mattermost mobile app from the Apple App Store (iOS) or Google Play Store (Android).
When prompted, enter the Mattermost server link and a display name for the Mattermost instance. Server URLs must begin with either
http://orhttps://. The display name is helpful in cases where you connect to multiple Mattermost instances. See the server connections documentation for details.Enter your user credentials to log into Mattermost.
The team that displays first in the team sidebar opens. If you’re not a member of a team yet, you’re prompted to select a team to join.
When your organization uses Microsoft Intune App Protection to secure Mattermost on iOS mobile devices, you must enroll to access Mattermost on mobile. Enrollment adds extra protection to work data while keeping your personal device and apps private.
What to Expect¶
Enrollment is mandatory and cannot be bypassed. It happens during sign-in and is typically a quick process. Access to Mattermost content is blocked until enrollment completes.
After enrolling, your Mattermost experience generally stays the same, but some restrictions are enforced.
Intune protections apply per Mattermost workspace (the Mattermost server you sign in to). If you have access to multiple Mattermost workspaces, each workspace may have different protections and requirements in place. This guide explains what to expect when the workspace you are connecting to is protected by Intune.
Note
Intune protections are based on your user account, not your Mattermost role or permissions.
Intune policies are controlled by your organization, not by Mattermost.
If you have questions about protections, contact your IT support team.
Sign In to Enroll¶
You only need to complete enrollment once per account.
Open the Mattermost mobile app on your iOS device.
Sign in with Microsoft (your organization’s sign-in option).
Enter your credentials.
During enrollment, you may be asked to confirm your Microsoft sign-in again. This is normal and usually takes only a few seconds.
When enrollment completes, you are notified.
If your organization’s Intune App Protection Policy requires it, you’ll be prompted to set a PIN to protect your work data.
Once the PIN is confirmed, the Mattermost Mobile App unlocks access to your workspace.
If you dismiss enrollment during sign-in, return to the sign-in flow and complete enrollment to continue using Mattermost on that device.
Mid-Session Enrollment¶
If enrollment is triggered while you’re already signed in and you tap Cancel, you won’t be able to continue using Mattermost on that device until enrollment succeeds. You can retry immediately, or log out and retry later.
What Changes After Enrollment?¶
Your organization’s Intune App Protection Policy may restrict how you copy, capture, save, and share data from Mattermost. The exact behavior depends on the specific policy settings your organization has configured.
Screenshot and Screen Recording Restrictions¶
Depending on your organization’s policy, you may not be able to take screenshots or record your screen while using Mattermost. If screenshot or screen recording is blocked, your device may still show the screenshot or recording UI, but the content may not be captured.
File Save Restrictions¶
Depending on policy, you may not be able to save files from Mattermost to personal or unmanaged locations. Files may be limited to locations approved by your organization.
Browser and Sharing Restrictions¶
Depending on policy, links may open only in an approved browser and sharing may be restricted to managed apps. If you try to open a link in an unapproved browser or share content to an unmanaged app, the action may be blocked.
Frequently Asked Questions¶
What Happens If I Leave the Organization or Lose My Device?¶
If you leave the organization, or your device is lost or compromised, your IT support team can wipe Mattermost work data from your iOS device. This is called a selective wipe.
A selective wipe means that:
Only Mattermost work data is removed from your device.
Personal apps, photos, and files are untouched.
You are logged out of the affected Mattermost workspace.
Other Mattermost workspaces on your device remain unaffected.
Why Can’t I Access Mattermost After Enrollment?¶
Mattermost may restrict access after enrollment if Intune detects a risk, such as:
Your device operating system is out of date
The device is too old to meet security requirements
A jailbroken device is detected
Malware is detected
Re-authentication is required
If this occurs, Intune blocks access and displays an error message in the Mattermost mobile app explaining what action is required. Contact your IT support team for help.
What Happens When I Log Out Manually?¶
When you log out of Mattermost:
All workspace data is securely removed from the device.
Intune protection for that workspace is removed.
You can sign back in with Microsoft if you need access again.
Reset your password¶
If you’ve forgotten your password, you can reset it on the login screen by selecting Forgot your password?, or by contacting your system admin for assistance.
Email address or username¶
When account creation with email is enabled by your system admin, you can log in with the username or email address used to create a Mattermost account.
Single Sign-On (SSO)¶
When enabled by your system admin, you may log in using your GitLab, Google, Entra ID, AD/LDAP, or SAML credentials.
When enabled by your system admin, you can log in with your GitLab account using a one-click login option.
When enabled by your system admin, you can log in with your Google account using a one-click login option.
When enabled by your system admin, you can log in with your Entra ID account using a one-click login option.
When enabled by your system admin, you can log in with your AD/LDAP credentials. This lets you use the same username and password for Mattermost that you use for various other company services.
When enabled by your system admin, you can log in with your SAML credentials. This lets you use the same username and password for Mattermost that you use for various other company services.
Mattermost officially supports Okta, OneLogin, and Microsoft ADFS as an identity provider (IDP) for SAML, but you may use other SAML IDPs as well. See our SAML Single Sign-On documentation to learn more about configuring SAML for Mattermost.
Multi-factor authentication¶
If your system admin enables multi-factor authentication for your Mattermost instance, you can optionally set up multi-factor authentication for your Mattermost user account by selecting your profile picture located in the top-right corner of Mattermost, and going to Security > Multi-Factor Authentication.
If your system admin enforces multi-factor authentication, you are required to set up multi-factor authentication for your Mattermost account. When you attempt to log in to Mattermost, you’re directed to the multi-factor authentication setup page. You won’t be able to access Mattermost until multi-factor setup is complete. If you encounter issues setting up multi-factor authentication, contact your Mattermost system admin for assistance.