Onboard users
People install the Anyray Connect desktop app and sign in with their work email. The app finds your organization from a verified email domain, with or without SSO.
Until the first request arrives, the console's Home opens a Welcome to Anyray window with these steps and where each one stands. Close it with the ×. The Get started card in the sidebar counts the steps done and opens the window again, on the first step still to do.
Under Email domain on Home, or Users, then Email domains on the Organization card, add
your domain, such as acme.com. Click the domain to see its TXT record and add that record at
your DNS host. Once DNS answers, Home reads acme.com verified and the domain list reads
Validated. Home checks again every 30 seconds.
Post https://app.anyray.ai/download in Slack or email. Each person installs the app for their
OS and signs in with their work email. Nobody runs a command. Users, then Add User,
has a download link per OS to send to one person.
Each person shows as Enrolled on Users. The welcome window says You're all set after the first request. In Anyray Connect, the Tools page guides each person through their first session.
The app tells people "Login is not enabled for your company yet. Ask your admin." They can sign in once the domain is verified.
Other ways to enroll
One shared terminal command, for machines that do not run the desktop app.
SSOOne org link. Your IdP verifies each person.
MDMPush the app and an enrollment policy through your macOS, Windows, or Linux MDM.
AI agentA key per agent or CI job; one command wires its host.
Devcontainers, Codespaces, SSH hosts, and other machines you never touch enroll headlessly; see remote and ephemeral machines. Anyone who works in a coding agent can paste their link into it instead: with your coding agent.
Check someone's setup
Open Users. Each person has a Machine status (see machine statuses). Click a name to open their Machine status tab. The red Errors item in the sidebar lists each person whose machine reads Error or Warning and opens them. The Health pill on their key (Users, or the Client keys card) is the narrower view: it reflects the gateway's view of the key's traffic, so nobody runs a command. Healthy means recent traffic and nothing to fix; Needs attention names the problem; Idle means no traffic for 7 days. Connect stopped checking in means their tools still send traffic but Anyray Connect has not checked in for 3 days, so it no longer updates or repairs itself. Ask them to reinstall Anyray from their invite link.