Browse topics · Organizations

Organizations

Client Magic keys

Create, use, and revoke client sign-in keys for registered organization devices.

A Magic key signs in a Client's linked CareMap account on an active shared device registered to the same organization. Owners, Manager Staff, and administrators can manage keys. A Client must already be assigned to the organization and linked to an account before Create key is available.

A key uses the Client's existing account access. It does not grant Staff, Manager, or administrator authority, or add a License.

Create and share a key

  1. Open the organization workspace's Members > Clients. Administrators can also use the organization record's Access > Clients.
  2. Find the Client and select Magic keys (count). On a phone, find it under Actions for client name.
  3. In the Magic keys dialog, select Create key.
  4. The QR dialog opens for the new key. Use Copy URL or Download QR to provide it to the intended Client or supporter.

The Magic keys dialog lists active keys by their hints. Copy copies a key's value; QR reopens its URL/QR dialog. Use Next page, Previous page, and Refresh page when there are more keys. A failed page load offers Retry.

Keys are reusable while eligible. Creating another key does not replace earlier ones. Keep the value, URL, and downloaded QR private and revoke unwanted keys. If creation reports an error after sending the request, refresh the key list before creating another; the key may already have been created.

Sign in with a key

  1. Confirm the intended browser or app is registered to the organization.
  2. On its sign-in screen, choose Magic key.
  3. Paste the issued key or URL into Magic key or URL and select Sign in.
  4. Check that the expected Client account opens. Sign out before the device passes to another person.

Opening the key's URL in an already registered browser can also start sign-in. Registration belongs to the browser/app installation, so a QR reader that opens a different browser may reach an unregistered sign-in screen. In that case, paste the key or URL into the registered CareMap instance.

The Scan Code sign-in action is for one-time account QR sign-in. Use the Magic key field for a client key; a client Magic key QR is a different kind of link.

Revoke a key or end access

Select Revoke beside the active key. It disappears from the active-key list and can no longer create sessions. Removing the Client assignment also prevents that assignment's keys from signing in; a new assignment needs new keys.

Revoking a key or device registration does not revoke existing account sessions. End those separately through sign-out or the account's Sessions controls. Removing an organization assignment can still change which organization resources the account may access.

If sign-in fails

  • If Magic key is missing, open Device Settings and check registration.
  • Confirm the key and active device belong to the same organization.
  • Check that the key is active, the Client assignment still exists, and the person is still linked to the intended active account.
  • If a key was revoked or its assignment ended, ask an authorized manager to issue a new key after restoring the intended relationship.
  • For copy, QR, or page-load failures, check the visible error and connection, then retry. Avoid generating duplicate keys to recover a failed copy.