Login Page

Step 1: Accessing the Login Page

Access the Toku Agent Portal using Chrome or Edge, as directed by your company administrator. With the August 2025 release, Toku introduced Identity Provider (IDP) integration. Key benefits of adopting IDP include:

• Centralized Authentication: IDPs enable centralized user authentication across multiple applications, reducing the risk of password reuse and simplifying credential management.
• Enhanced Security Controls: By integrating with multi-factor authentication (MFA), conditional access policies, and identity governance, IDPs significantly reduce the risk of unauthorized access and account compromise.

Step 2: Locating the Login Form

Once you're on the application, look for the login form. It is usually prominently displayed on the page and consists of one input field: email. 

Step 3: Entering Your Credentials

Enter your email address in the appropriate input field. Make sure to type it accurately, paying attention to uppercase and lowercase letters.

Based on the IDP selected for your organization, such as Entera or Okta, the system will automatically redirect you to your IDP provider for authentication, similar to any standard SSO login experience.

Note:
If a supervisor or admin needs to log in to both the Admin Portal and the Agent Portal simultaneously, it is recommended to use different browsers or an incognito window. For example, use Chrome for the Agent Portal and Edge for the Admin Portal. This helps ensure that a logout event—whether manual, due to session timeout, or forced logout—does not affect the other session.

Logging into both portals using the same browser is not recommended due to limitations with OAuth and SSO.

Step 4: Submitting the Login Form

After entering your email address, click the "Login" button or press the "Enter" key to submit the login form. Ensure that all required fields are filled in correctly; otherwise, you may receive an alert message stating: "Invalid email address. You have used 1 of your N login attempts."

The account will automatically be locked after a certain number of failed attempts (defaulted to N, depending on your organization's IT settings). If this occurs, you may see an alert message stating: "Account locked. Authorized customer administrators with the necessary permissions can unlock locked accounts."

Step 5: MFA Verification

Depending on your organization's SSO settings, you may be prompted to enter a one-time password (OTP) or complete another form of multi-factor authentication (MFA) for added security.

Step 6: Selecting the correct User Account

If a user is associated with more than one account, all linked accounts will be displayed for selection. For example, johndoe@toku.co may serve as an agent for three different lines of business under the company Toku. In this case, the system will list all three accounts as "Agent-Lob1", "Agent-Lob2", and "Supervisor-Lob3".

Based on the user's needs, johndoe can select one of the accounts from the list, as shown in the screenshot below. Clicking on a specific account will log the user into the corresponding AgentPortal.

Note: The platform currently does not support concurrent logins using the same email address. Only one active session per email is allowed at a time.

Step 6: Logging Out

When you have finished using the application, it is good practice to log out, especially if you're using a shared or public device. Look for a "Log Out" option, located in the user profile below account settings. Click on it to securely log out of your account.