BoldDesk Login Issues: Quick Fixes & Troubleshooting Guide

If you are unable to access your BoldDesk portal, it may interrupt your workflow and restrict access to important support tools. This guide offers troubleshooting steps to assist you in identifying common login problems. If you are unable to log in to BoldDesk, here are some possible reasons and solutions:

1. Blank Page After Login

Ensure the domain https://cdn.bolddesk.com is allowed on your network.
Clear the browser cache and restart the browser.
Verify the CDN is accessible by visiting https://cdn.bolddesk.com/customer-app.
Disable ad blockers, interfering browser extensions, or VPNs, if applicable.
Allowlist the BoldDesk portal domain and https://cdn.bolddesk.com in your organization’s security settings.

2. SSO Configuration Issues

Ensure the JWT public/private key pair used for token generation and validation is correct.
Use a key size of at least 2048 bits for RSA key generation.
Verify that the claims in the JWT are properly structured and signed.
Review the callback URLs or settings related to SSO if validation passes but login still fails.

Explore How to Configure JWT-Based Single Sign-On (SSO) in BoldDesk

If you see the error “not an admin or agent” after logging in, it usually means you’re signed in with an email that doesn’t have admin/agent access. Make sure you use the correct assigned email, and if using Microsoft SSO or form login, try an incognito window to avoid automatic login with the wrong account.
If a user is redirected to the Customer Portal after signing in and does not see the Go to Agent Portal option, verify that the user is signing in with the email address configured as an agent in BoldDesk. To access the Agent Portal directly, use this URL format: https://yourdomain.bolddesk.com/agent.

3. Security Measures or Restrictions

Implement Single Sign-On (SSO) for seamless login, ensuring all related settings are applied correctly.
Review password policies, IP restrictions, and allowlisted domains to ensure compatibility.
Contact your network admin if organizational security policies are blocking BoldDesk access.

In BoldDesk, the “Stay signed in” option is part of the identity provider’s sign-in experience (for example, Microsoft Entra ID / Microsoft sign-in) rather than a BoldDesk-specific setting. If the user selects Yes, the identity provider issues a persistent authentication cookie, which allows the browser session to remain signed in across restarts. If the user selects No, a non‑persistent cookie is used and the session typically lasts up to 24 hours or until the browser is closed.

4. Network and Maintenance Issues

Check the BoldDesk Status Page to ensure there is no ongoing downtime or system maintenance that might impact access.
For additional details on security protocols, explore Responsible Disclosure of Security Vulnerabilities.

5. “Site Not Active” Login Error in BoldDesk

In BoldDesk, the “Site Not Active” message typically means either you’re using an invalid or changed portal domain (old URL no longer works), or your subscription/tenant is expired or suspended and access is restricted until it’s reactivated.

In BoldDesk, when authentication is activated, users who are logged in are automatically identified and will not be asked to provide their email address again. The email input form applies solely to unauthenticated users and must not be shown to customers who have already signed in. This approach guarantees a more efficient and seamless customer experience.
If users encounter a “Site isn’t active” message when accessing the customer portal, verify that the portal is currently active and enabled. This message can also occur if the portal URL is incorrect, outdated, or contains a spelling mistake. Confirm that the customer is using the correct portal link and that the customer portal has not been deactivated.

6. Account Lockout Due to Multiple Failed Login Attempts

For security purposes, user accounts are automatically locked after five consecutive failed form-based login attempts using an incorrect password.

What the User Sees

When the lockout occurs, the user will see this message:

“Your account has been locked due to multiple failed login attempts. Try again in 1 hour or contact support.”

Duration and Recovery

The lockout is temporary.
It is automatically cleared after 1 hour.
No manual action is required from support.
After the 1-hour period ends, the user can sign in normally using the correct credentials.

This behavior helps protect accounts from unauthorized access attempts by temporarily blocking further form-based login attempts after repeated incorrect password entries.

Alternative Sign-In Options During Lockout

During the lockout period, users may still be able to sign in immediately using:

A configured Single Sign-On (SSO) provider, or
A social login option (if available)

How to Troubleshoot

Rule out service incidents. Review the public BoldDesk Status Page to ensure services are operational before deeper troubleshooting.
If the site loads but login/UX fails (blank page/SSO issues): allow BoldDesk’s CDN, clear cache, and re‑try per the login guide.
Still seeing “Site Not Active”? Contact BoldDesk Support or [email protected] with your portal URL so the team can check account status.

Quick Reference Table

Issue	Key Fixes
Blank Page After Login	Allow CDN, clear cache, disable extensions, allowlist domains
SSO Configuration Problems	Validate JWT keys, claims, callback URLs
Security Restrictions	Review password/IP policies, enable SSO, contact admin
Network/Maintenance Issues	Check status page, confirm no downtime
Account Lockout	Wait 1 hour, sign in with correct password; SSO/social login may still work

Frequently Asked Questions

Why do I see a blank page after logging in?
Most commonly the network is blocking BoldDesk CDN assets (https://cdn.bolddesk.com) or the browser cache/extensions are interfering. Allowlist the CDN and clear cache.
How do I fix SSO login failures?
Validate the JWT signing key pair, ensure RSA keys are at least 2048 bits, confirm claims and signatures, and verify callback/redirect URLs. See the SSO guide: How to Configure JWT-Based Single Sign-On (SSO) in BoldDesk.
What if my organization’s firewall blocks BoldDesk?
Ask your IT/security team to allowlist the BoldDesk portal domain and https://cdn.bolddesk.com.
What does “not an admin or agent” mean?
The signed-in email does not have BoldDesk admin/agent permissions in that account. Use the correct assigned email, and try an incognito window if Microsoft SSO is auto-selecting the wrong account.
What does “Site Not Active” mean?
Usually the portal URL is invalid/changed, or the tenant subscription is expired/suspended. If status is healthy and the error persists, contact BoldDesk Support with the portal URL.
How long does the form-login lockout last after failed attempts?
The lockout clears automatically after 1 hour. No support action is required.
Can I still sign in during the lockout period?
Form-based login is blocked during lockout, but SSO or social login may still allow immediate access if configured.

Was this article useful?

Dislike

Comments (0)