Skip to main content
Salesgraph Assist uses a browser-based authentication flow powered by WorkOS AuthKit. You sign in through your web browser, and the desktop app securely stores your session locally.

Sign-In Flow

  1. Click Sign in with email in the desktop app.
  2. Your default browser opens to the Salesgraph login page.
  3. Complete authentication in the browser (email-based login).
  4. The desktop app polls for the authentication result in the background (up to 2 minutes).
  5. Once the login succeeds, the app stores your session tokens and loads the main interface.
You do not enter credentials directly in the desktop app — all authentication happens in your browser for security.

Session Persistence

Your authentication tokens are stored locally on disk at ~/Library/Application Support/salesgraph-desktop/auth.json. The file is encrypted using Electron’s safeStorage API, which leverages the macOS Keychain for encryption keys. On each app launch, the stored session is loaded immediately for an instant startup experience. The app then refreshes the session with the server in the background. If the token has expired, it is automatically refreshed.

Logout

Click your profile or use the app menu to sign out. Logging out clears the encrypted token file and resets the app to the login screen. Any cached data (meetings, session) is also cleared.

Multi-Tenancy

Salesgraph supports organization-based multi-tenancy. When you sign in through an organization with SSO configured, you are automatically placed into the correct tenant. Personal accounts without an organization receive their own workspace.

Roles and Permissions

Your organization administrator assigns roles that determine your access level:
RoleAccess
ViewerRead-only access to meetings and data
MemberStandard access, can record and sync
ManagerMember access plus team management
AdminFull access to organization settings, SSO, and member management
OwnerAdmin access plus billing and destructive operations