herbe ID: questions and answers
The questions people ask most. Not here? Book a demo and ask us.
All questions
What is herbe ID?
The one place where you sign in for herbe.app products such as the calendar, the service app and the portal's office side. You sign in once; each app then asks herbe ID who you are.
Does herbe ID decide what people may do inside an app?
No. It tells an app who you are and whether you may reach it. Your role, your customers and your rights inside the app are decided by the app.
Is there a password?
No. You sign in with an emailed link or code, a passkey, your work Microsoft account or eParaksts. An authenticator app can add a second step.
Can people sign themselves up?
No. People exist on herbe ID because someone from your organisation, or from herbe, invited them.
Do we need Microsoft to use herbe ID?
No. Microsoft Entra ID single sign-on is one way in among several. If your people have work Microsoft accounts, you trust your company's tenant once and they sign in with those.
What is a passkey, and what if I lose the device?
A passkey lives on your device or in your password manager and is unlocked by your fingerprint, face or device PIN. It counts as both steps of two-step sign-in. We cannot recover it: sign in with the emailed link and add a new one.
What does signing out do?
Signing out of herbe ID signs you out of the apps you reached through it in that browser. Sign out everywhere ends every herbe ID sign-in and every app connection you have, on every device. Apps notice within about five minutes.
How do I take someone's access away?
Remove their access to an app, or disable or remove their membership. Their sign-in ends at once. A token an app already holds lasts ten minutes at most.
Can an AI assistant see our data?
Only if an admin has switched AI on for that app. It is off by default, and the assistant then acts with the person's own rights, never more. What cannot be undone, such as deleting an event, waits until the person presses Approve in the browser.
Is anonymous mode really anonymous?
No. Names and codes of customers, suppliers, contacts, employees, items and projects are swapped for codes before the model sees them, but herbe can map the codes back. It is pseudonymisation, so data protection law still applies, at lower risk.
What does the audit log record, and can it be changed?
It records sign-ins, invitations, memberships, app access, the AI switch and more, as ids rather than addresses. It is append-only and hash-chained, and no screen edits or deletes a row.
Which actions ask me to confirm it is you?
Dangerous ones, such as making someone an organisation admin, removing access or trusting a Microsoft tenant. You answer with an authenticator code, or with a passkey, which opens a five-minute window. An emailed link, a Microsoft sign-in or an eParaksts sign-in does not count.
Where do I sign in?
At id.herbe.app. An app that needs you to sign in sends you there and brings you back.
Want to see it with your own team?
30 minutes, live, around the way your people sign in today.