Accepting an invitation

When an admin invites you from Account → Additional Users, you join their existing company. You do not go through first-run plan selection and Stripe for that company when you Accept Invitation while signed in.

Invitation email

The invite email tells you that you have been invited to join [Company] on ThreatHarvest and includes a Set up account (or equivalent) action. The link targets the app invite URL:

https://app.threatharvest.com/invite/{invite-id}

The {invite-id} segment is opaque (a UUID in the product). Treat it as a one-time credential — do not share invite links publicly.

Signed-out invite (new account)

If you open the invite link while signed out, the product sends you to the same hosted auth UI on auth.threatharvest.com already described in Getting started → Sign in.

For new users, that flow asks for a username and password to create an account (not only sign in to an existing one).

If the new account has not verified email yet, you are prompted to verify via the email link first (see Verify your email). After you verify — or if the address is already verified — you continue to the Name your organization step, as described under First-run company setup. That step creates the company and associates it with your new account.

Invite page

Opening a valid invite link while signed in shows the invite page for that company.

By continuing you agree to the privacy policy and terms of service.

• New Organization — takes you to first-run company setup (/setup)
• Accept Invitation — primary action to join the inviting company

Accept the invitation (signed in)

Choosing Accept Invitation with an already-signed-in session lands on Overview for that company (/overview). You are not asked to name the organization, select a plan, or complete Stripe checkout for the inviting company.

From Overview, continue with Navigating the app and the rest of the how-tos.

Used or invalid invites

An invite link can only be used once. Reopening a used or otherwise invalid invite does not explain whether it expired or was already accepted. Ask an organization admin to send a new invite from Account → Additional Users.

Invitation vs new-organization setup

• Accept Invitation (signed in) — join the company named on the invite; skip first-run setup for that company.
• Signed-out new account via invite — you create your account, verify your email if asked, and then name your organization, which creates the company for your account. See above.
• New Organization on the invite page (or starting from a brand-new account with no company) — you go through company setup: name your organization, select a plan, and complete Stripe payment, then land on Overview. See First-run company setup.