Vision Account — help

One Vision Account signs you in to every Vision app, such as PrinterVision and WareVision. You sign in once; the apps take you from there.

Pages

Signing up

The Start free button on a product's website opens Start your free trial, in that product's colours. No payment details are asked.

1. Press Continue with Microsoft, or fill in Your name and Work e-mail address and press Continue. Throwaway mail services aren't accepted: a trial needs an address you keep.
2. On Check your mail, type the six-digit Code we sent, choose a password in Choose a password and Password again, and press Continue. With Microsoft there's no password to choose. No mail? Look in your spam folder first, then press Send a new code. Only the newest code works.
3. On Your company, fill in Company name, choose your Country (your time zone, language and VAT follow it) and name your First site. Tick that you agree to the terms of use and the data processing agreement, and press Start the trial.

Your organisation is ready at once, with you as its administrator, and you go straight into the product. You can add more sites and invite colleagues afterwards.

If the address already has an account, we mail it a note to sign in instead of a code. The page looks the same either way, so nobody can find out from it who has an account.

The first time your address is confirmed (by the code we mail you, or by Microsoft), any way in that was added to the account before (a linked Microsoft account, a passkey, an authenticator app) is removed, and any session on it ends. That way nobody who set up an account with your address before you did keeps a way into it.

Signing in

1. On Sign in, fill in E-mail address and Password and press Continue. When an app sent you here, the page says so ("to continue to PrinterVision") and shows that app's name and colours on every step; afterwards you go straight back into it. If the password is wrong, the address you typed stays filled in.
2. The second step depends on your account:
   • Without an authenticator app or passkey, we e-mail you a six-digit code. On Check your mail, type it in Code and press Sign in. The code works for ten minutes, once. No mail? Look in your spam folder first, then press Send a new code. Only the newest code works.
   • With an authenticator app or passkey, One more step asks for it. Press Use your passkey, or type the code your app shows in Code from your authenticator app and press Sign in. No code is e-mailed: someone who can read your mail can't get around your app.
3. With Microsoft: press Continue with Microsoft and sign in with your work account. The first time, you get a Vision Account with the same address. If you already have a Vision Account with that address, it is used when Microsoft confirms the address belongs to your organisation; otherwise sign in with your password and press Link a Microsoft account under Sign-in and security.
4. With a passkey only: on Sign in, press Sign in with a passkey and confirm with your fingerprint, face or device PIN. No password needed. The button shows only in browsers that support passkeys.

While the page opens, your browser quietly does a small calculation that keeps automated password guessing out. You don't see it. If the page was open a long time, you may be asked to try again.

You stay signed in for up to twelve hours. After that, or after Sign out, you sign in again. Signing out here also signs you out of the apps you opened from it.

In the apps

Every app signs you in through your Vision Account: open a second app and you're in without signing in again. Its user menu shows who you are and in which organisation, with:

• Switch organisation: Choose an organisation lists yours; press Open next to the one you want.
• Sign-in and security: opens that page here.
• Sign out: signs you out of that app, of your Vision Account, and of every other app you had open, on this device. Your other devices stay signed in; use Sign out everywhere for those.

If a link from somewhere else tries to sign you out, a Sign out? page asks first: press Sign out to go ahead, or Stay signed in. That way another website can't sign you out without you knowing.

What you see in an app follows your role in the organisation: a page your role may not open isn't in the menu, and opening it anyway shows that you have no access.

If your password is changed, or you or an administrator end your sessions, you are signed out everywhere: here within a minute, and in the apps as soon as they hear of it.

Sign-in and security

Open it from Welcome with Sign-in and security. To change anything on it, your sign-in must be from the last quarter of an hour; otherwise press Sign in again first. Every change is e-mailed to you, so a change you didn't make doesn't go unnoticed.

Anything that takes a way in away or signs you out asks first: the button opens what will happen, with Cancel and a red button that says what goes. Nothing changes until you press that one.

• Authenticator app: press Set up an authenticator app, scan the QR code with an app such as Microsoft Authenticator, Google Authenticator or 1Password (or type the Key), type the code the app shows and press Turn on. Copy next to the key copies it, for typing it into an app on this computer. Turn off, then Turn off the authenticator app, brings back the e-mailed code.
• Microsoft: Link a Microsoft account lets Continue with Microsoft sign you in; Unlink, then Unlink Microsoft, removes it and signs you out on your other devices and in the apps. If you signed in this time with Microsoft, you sign in again with your password. If Microsoft is your only way in, add a passkey or set a password with Forgot your password? first.
• Passkeys: type a Name for the new passkey (for example "Laptop") and press Add a passkey, then confirm on your device. A passkey only works on the real Vision Account site, so a fake site can't use it. Remove, then Remove the passkey, takes one off.
• Recovery codes: with your first authenticator app or passkey you get ten recovery codes, shown once on Your recovery codes. Keep them somewhere safe, such as a password manager or on paper; Copy all codes copies them in one go. Each one signs you in once, when your phone and passkeys are gone: on One more step, open Lost your phone and passkeys? Use a recovery code. After that, Sign-in and security opens so you can set up a new app or passkey. Make new recovery codes, then Replace my recovery codes, replaces every old one.
• Sign out everywhere: press it, then Sign out of every device, to sign out of every app, on every device, this one included. Use it after losing a device.

When a trial ends

A trial runs for 30 days, without payment details. Subscriptions shows how many days are left, and from a week before the end Welcome and the organisation's Overview say so: Your LabelVision trial ends in 5 days. Extend by 14 days gives a trial more time once. When it ends, the product doesn't stop: printing approved labels and inspection keep working, while designing and settings become read-only. The organisation's administrators get a mail. Without a purchase, the product's data is deleted 90 days later; a second mail comes two weeks before. Nothing is ever deleted without both mails. Buying a plan comes in a later release; until then, talk to us (the link under Subscriptions) and we arrange it with you.

When your administrator must approve Vision Account

Some organisations let only their Microsoft administrator agree to new apps. Then Continue with Microsoft shows Your administrator needs to approve Vision Account with an Address for your administrator. Send it to them; they open it, sign in and press Accept. Vision Account only asks to see your name and e-mail address. Afterwards everyone in your organisation can continue with Microsoft. Until then, sign in with your e-mail address.

A forgotten password

1. On Sign in, press Forgot your password?, fill in E-mail address and press Send the code.
2. On Choose a new password, type the code from the mail in Code, then your new password in New password and New password again, and press Save the new password.

The new password must be at least 12 characters. A few words you'll remember work well. It can't be your e-mail address or a password everybody tries. Afterwards you're signed out everywhere, and you sign in with the new password. If an app sent you to sign in, that sign-in takes you back into the app. If you have an authenticator app or passkey, you still need it to sign in: a new password alone doesn't get around it.

Your organisation's structure

Sites in your organisation's menu is your organisation as it really is: the group at the top, its companies (a mother and its daughters), divisions, sites (a warehouse, DC, plant, store or office), buildings, areas (a hall, a zone, a dock, a line) and stations. Printers, labels, settings and access attach to these places, and what holds at a place holds for everything below it.

Each place is a row of the tree, indented under the one above it, with its buttons at the end of the row.

• Add below adds a place under that row: choose its Kind, type its Name, and pick a Time zone (or leave Same as above), then Add. The order is fixed, so the list offers only what fits there: a site can sit under a company but never under an area, and nothing goes under a station. A small company needs no more than its sites; a group uses as many levels as it has.
• Time zone and country come from the place above unless you give a place its own. Change a company's time zone, and every site below that didn't set its own follows. "Today's prints" and schedules go by the place's own clock.
• Edit renames a place, gives it its own Time zone (or Same as above to take the one above again), or moves it with everything below it Under another place where it fits; then Save.
• Retire a place you no longer use, bottom up: it keeps its history, nothing new goes there.
• A company that leaves the group, or a company that joins another group: we move it for you, with everything below it (its printers and their jobs, subscriptions billed there, labels). Ask us through Talk to us. Its people stay in the group; the new organisation's administrator invites whom they need.

Operators on the floor (workforce)

Operators without an e-mail address still print labels, and every print must be traceable to a person. Under People, Operators, whoever administers people at a site adds them: a name, their personal number, a PIN of four to eight digits and, if they have one, their badge; their site; and a role made for operators (the products bring them, for printing: print operator).

• They sign in only at a registered station of their site: a PC or tablet on the line, enrolled like an agent (Sites, Devices, Get the download of a station). The station proves the place, the PIN or badge the person. The same PIN in a browser doesn't work.
• A session lasts at most half an hour and ends when the next person signs in at the station.
• Five wrong PINs lock the account for a quarter of an hour; Set gives a new PIN and lifts the lock.
• What they print carries their name; their sign-ins are in the audit trail.
• Nobody adds an operator with more than they hold at that site themselves.

Roles: who may do what, and where

A role is a set of permissions, given to someone at a place in your structure, where it holds for that place and everything below it. Give a designer their role at the company whose labels they make, an operator theirs at their site, and they see and do exactly that.

• Everyone in your organisation has a tenant-wide role: administrator (everything), user administrator (people), or member (nothing by itself). Everything else is a role at a place: under People, Members, Give a role on the person's row (which Role, At which place, then Give the role), and Remove next to a role to take it back.
• Built-in roles come with the apps (for PrinterVision, for example: administrator, technician and user) and grow with them when an app adds a permission to one.
• Your own roles, under Roles: copy a built-in role, or tick permissions from any app (a Site supervisor who sees the printers, prints labels and reviews inspection results). Your own roles stay as you made them; a copied one shows what its source gained since, so you can decide to add it.
• A user administrator for one site: give someone user administrator at that site. They see that site and its people only, invite people to it, give roles there and switch its people off and on. They never see the rest of the organisation, the mail domains or the products.
• Nobody gives more than they have: you can give a role only where you administer people, and only when you hold every permission of that role there yourself.
• An invitation can be for a role at a place: the person becomes a member with that role there.
• A place that moves takes its roles along; a change to anyone's roles reaches every app within seconds.

The audit trail

Security & support, Audit trail lists who did what in your organisation and when, one sentence per entry (Ada Admin invited ann@noordhaven.example): people invited and switched off, roles given and taken back, places added and moved, API clients made and stopped, support's visits, and every change by Vision Account itself. Times are in UTC. Each entry is sealed together with the one before it, so nobody can change or remove one without it showing: the page says The trail is intact. Export as CSV gives you all of it, with the seals, for your auditor or your own records.

Administrators read it; so does anyone you give the auditor role, who sees the trail and nothing else.

When Vision Account support helps

Our support works in your organisation only with your permission:

1. They ask, with a reason (a ticket number, what they need to look at) and for at most eight hours. Your administrators get a mail.
2. One of your administrators approves or declines under Security & support, Support access. Approved, support is in from then on, for the hours asked; End now sends them out earlier.
3. While they're in, they work under their own name, marked (Vision Account support), and everything they do is in your audit trail. They can't approve their own visits, nor make API clients.

Untick Support access needs our approval if you'd rather let support in without asking each time; every visit is still in the audit trail.

API clients for your own systems

Your ERP, WMS or a script can work with the Vision apps by itself. An administrator makes an API client for it under Advanced, API clients:

1. Give it a name (WMS Antwerp), tick what it may do in each app (listed per app, in words such as Submit jobs), and choose its last day (at most a year).
2. Make the client. The next page shows its client id and secret once. Copy the secret into your system now: we keep only a fingerprint of it, so nobody can show it again. Every administrator gets a mail that a client was made.
3. Your system uses the id and secret to get a short-lived token from the address shown on that page, and sends the token with every call to an app (the app's integration guide has the details for your developers). A token works for ten minutes, for every app the client has permissions in.

• The same client works for every app: one id and secret, and what it may do in each app is what you ticked.
• Some permissions only count when your plan includes the matching feature; the page says which.
• Stop a client the moment it is no longer needed, or when its secret may have leaked: no new token from then on; a token it already has runs out within ten minutes. A lost secret isn't recovered: make a new client and stop the old one.
• The page shows when each client was last used, who answers for it and its last day.

Organisations

Welcome lists every organisation your account belongs to, with your role in each. An app opens in one organisation at a time; when you belong to more than one, the app asks which.

Your account doesn't belong to an organisation yet means nobody has added you. Welcome then offers three ways in:

• Try a Vision app: Try a product (Try PrinterVision free for 30 days) to start a trial for your company. The product you came from is the first one.
• Join your colleagues: when your company is on Vision Account with your mail domain, it shows below under Your colleagues are on Vision Account; otherwise ask one of its administrators to invite your address.
• Have an invitation?: open the link in its mail while signed in with the address it was sent to.

CaptureTech's operators without an organisation of their own go straight to the Operators' console.

Joining colleagues

• By invitation: open the link in the mail and press Accept. You need to be signed in with the address the invitation was sent to: press Sign in to accept, or without an account Create one with your address (it is filled in for you), and you come back to the invitation afterwards. Signed in with another address? Press Sign out, then sign in as the invited address, and the invitation opens again. An invitation works for seven days, once.
• By your company's mail domain: when your organisation has proven its mail domain, Welcome shows it under Your colleagues are on Vision Account. Press Join, or Ask to join and wait for an administrator to let you in. Which of the two you see is your administrators' choice; they may also allow invitations only.
• At sign-up: if your company is on Vision Account already with your mail domain, Your company says so and offers to join it instead of starting a second one.

When an organisation asks for one more step

An organisation can decide how its people sign in: only with Microsoft from its own directory, only with their Vision Account account, or either; and it can ask for a strong second step (a passkey, an authenticator app, or Microsoft with multi-factor sign-in). If the way you signed in isn't enough for that organisation, One more step for the organisation's name opens when you go into it:

• Continue with Microsoft: sign in with your organisation's Microsoft account. It's added to the sign-in you already have; you stay signed in as yourself.
• Your Vision Account password, then Continue: your own password, then the second step as usual.
• Use your passkey or authenticator app: for an organisation that asks for a strong second step.
• Open another organisation or Sign in with another account if this isn't the one you meant.

An invitation from such an organisation works the same way: press Accept and you're asked for the step first. Under "Microsoft only", an invitation sent to your Microsoft work address can be accepted after continuing with that Microsoft account, even if your Vision Account has another address.

Managing your organisation

Your organisation is in the menu on the left, under its name, for its administrators; Welcome has the same menu. A user administrator sees Overview and People; an administrator everything; an auditor Overview and the audit trail. Each entry's pages are tabs at the top of the page.

• Overview: Set up your organisation while it is new, the numbers, Waiting for you (people asking to join, support asking to come in, domains not yet verified, a subscription that needs you), your subscriptions and the latest activity.
• People: three tabs.
  • Members: everyone in the organisation with their role; the search field finds someone by name or address. Give a role on a person's row gives them a role at a place. Switch off stops someone from opening the organisation; Switch on lets them back. You can't switch yourself off, and the last administrator stays.
  • Invitations & requests: Invite someone: type their E-mail address, choose Whole organisation with a Role in the whole organisation (member, user administrator, administrator), or At a site with a Role there and where it holds (At), and press Send the invitation. You can only give a role up to your own. Withdraw cancels an invitation that hasn't been accepted. Under Asking to join, Let in or Decline someone who asked.
  • Operators: the people on the floor (see Operators on the floor above).
• Sites: Sites, the tree of your companies, sites, buildings, areas and stations (see Your organisation's structure above), and Devices, the agents and stations at your sites.
• Subscriptions: your organisation's products and their trials. Try … free for 30 days next to a product you don't have yet starts its trial, for the same people and sites. Extend by 14 days extends a trial once, also after it ended. A product shows here a moment after its trial starts.
• Sign-in & access: Sign-in method (below), Mail domains and Roles.
  • Mail domains: type your company's Domain and press Add the domain. Add the TXT record shown to the domain at your DNS provider, then press Check now. It can take a few minutes, sometimes an hour, before the record shows. A public mail service (Gmail, Outlook and the like) can't be added, and a domain belongs to one organisation only. Next to it, Who may join, for people with an address on a verified domain: Only people we invite, They ask, an administrator lets them in, or They join by themselves, as members. Press Save.
• Security & support: Audit trail and Support access.
• Advanced: API clients and Settings (exporting and closing the organisation).

An older link to a page that has moved (Structure, Products) still opens the page it became.

Set up your organisation, on Welcome and the Overview of a new organisation, lists the first steps: Add your sites, Invite your colleagues, Install the Vision Agent at a site, Verify your company's mail domain and Let your people sign in with Microsoft. Each one is a link to where it is done, and is ticked by itself once it is (an invitation sent, a domain verified), with how many are done. The list goes when every step is done; Hide puts it away in this browser.

Nothing is removed in one click. Remove, Switch off, Retire, Delete, Withdraw, Decline, Unlink, Stop and End now first open a short note right under the button saying what will happen, with Cancel and a red button that does it (Unlink and remove 2 domains, Stop the client). Nothing happens until you press the red one.

When something can't be done, the page says why next to the form you used (or at the top for a button in a list), in words about that form: an invitation to an address that is already a member, an operator's number that is taken, a place that can't go under the one you chose. Fix that and send the form again.

Sign-in: how your people sign in

Sign-in & access, Sign-in method in your organisation's menu is for its administrators.

• Who gets in: choose Vision Account or Microsoft (the default), Microsoft only or Vision Account only, tick Require a strong second step if you want it, and press Save. Everyone of the organisation is asked to sign in the new way at their next step, and every administrator gets a mail.
  • Microsoft only needs a linked Microsoft directory first, and you choose it while signed in with Microsoft from that directory, so you can't lock yourself out. Guests of your directory sign in through it too.
  • Vision Account only waits until every administrator has a password and a passkey or authenticator app; the page lists who hasn't.
• Microsoft directories: Link a Microsoft directory sends you to Microsoft, where an administrator of your company's directory (a Global, Privileged Role, Cloud Application or Application Administrator) agrees, and then signs in there to prove it. A Global or Privileged Role Administrator's sign-in also verifies their own mail domain for you. One directory belongs to one organisation; Details under it shows Microsoft's id of the directory, should our support ask for it. Unlink removes it, with the mail domains it verified (the confirm step says how many); it isn't possible while the organisation is on Microsoft only.
• Members: each person with whether they're on a verified domain, linked to Microsoft, and have a password and a strong second step. Keep as exception lets someone without your directory (an outside accountant, say) keep signing in with their password and a strong second step under Microsoft only; End the exception stops that. Mail: set a password sends someone the way to choose a password.

If Microsoft can't let your people in at all (an outage at Microsoft, a deleted directory), talk to us: Vision Account support can put your organisation back on Vision Account or Microsoft. Every administrator gets a mail with the reason, and it's in your audit trail. Administrators then sign in with their password and second step; without a password, use Forgot your password? on the sign-in page.

For CaptureTech's operators

The Operators' console is only for CaptureTech staff who sign in with CaptureTech's Microsoft account and hold the operator role. On Welcome, Operators' console opens it; in the menu on the left it is under CaptureTech, with its pages below it. An operator's own account needs no organisation. Everything you do here is logged under your name.

An organisation's page

The page answers each form right beside it, and a refused form keeps what you typed.

• Support access: give Why (5 to 500 characters; its administrators get it by mail) and Hours (1–8), and press Ask for support access. One of its administrators approves it, unless the organisation lets support in without asking: then you're in at once. While the visit lasts, the organisation shows in the menu on the left under CaptureTech, marked Support visit, and its name at the top of the page says so too; you work there under your own name, marked as support, and everything is in its audit trail. A suspended or closing organisation can't be visited.
• Sign-in says how its people sign in. When Microsoft can't let a Microsoft only organisation in (an outage, a deleted directory), give Why and press Reset sign-in, then confirm: it goes back to Vision Account or Microsoft, every administrator gets a mail, and the reset is in its audit trail under your name. On an organisation that signs in that way already, there is nothing to reset.
• Suspend stops an active organisation everywhere, for example for an unpaid bill or abuse. Give Why, press Suspend, type the organisation's name under Type its name to confirm and press Suspend it. Nobody can sign in to it, and its apps sign its people out and stop their work for it within a minute. Nothing is deleted. A suspended organisation shows Reactivate instead: give Why and press Reactivate to bring it back. Both are in its audit trail under your name. One that is closing is on its way out already and can't be suspended.
• Move or split off a site moves a company, site or other place with everything below it (printers, jobs, subscriptions billed there). Its people stay where they are. In steps:
  1. Pick the site under Site to move, choose Move into another organisation or Split off as an organisation of its own, and press Next. Change goes back to this step.
  2. To move it: find the other organisation by name and pick it, then pick the place there it goes under (only places that can hold it can be picked), and press Review. To split it off: give Its name and Its administrator's address (someone who has a Vision Account already), and press Review.
  3. Check the summary and press Move it or Split it off. The organisation's page then says where it went, with a link to that organisation.

Apps

• Register an app: fill in Key (lower case, for example printervision; it can't change later), Name and Address (the app's own web address, starting with https), and press Register the app. The next page, The app is registered: copy its secret now, shows its Client id, Secret and Authority once, each with Copy: put them in the app's settings straight away, because only a fingerprint of the secret is kept. Reloading the page shows nothing. For the app's developers has the technical names. Done, back to Apps returns to the list.
• An app's page shows its key, address and dates. Events address is where the platform sends that app what happens in its customers' organisations (a new site, someone who left, a changed sign-in rule); leave it empty for an app that fetches them itself, and press Save. When an app isn't taking them, the page says how many tries failed and what the last one said; the app gets everything it missed, in order, once it takes them again.
• New secret makes a new secret and shows it once, after you confirm with Make a new secret. The old one stops working at once, so put the new one in the app first thing.
• Switch off stops an app, after you confirm with Switch it off: nobody signs in to it any more and it can no longer call the platform. Its registration stays on record.

Catalogue and price lists

• A product's page holds its Document: its features, plans (with their trial days, extensions and days of grace), add-ons and prices in cents. Change it and press Preview: the page shows the product as it will be sold (plans, add-ons, prices as money) and What changes against the version published now. If something is wrong, it lists what, and nothing is published.
• To publish, press Publish under What changes, type the product's key under Type … to confirm, and press Publish. It becomes the product's next version, and customers who have the product get their licences again at once. A plan or add-on left out is no longer sold; customers who have it keep it.
• On Catalogue, New product with Its key and Start its document begins a product that isn't sold yet.
• Price lists: a product's prices name the list they are in, so make the list first. Give Key (lower case, for example eur-dach), Currency (three letters, such as EUR) and Countries (two-letter codes, separated by commas), and press Save the price list. An existing key changes that list's countries; a list keeps its currency, so another currency is another list.

Messages on the console

Signed in as an operator, the Vision apps also open their own operators' pages to you (for example PrinterVision's firmware advisories). A customer's own data still needs an approved support visit.

Demo mode

On a demo installation, Sign in also lists the people of the demo world. Press one to sign in as that person without a password. Check your mail and Choose a new password show the code on the page, because no mail is sent.

Messages and what to do

Lost your phone, your passkeys and your recovery codes? Ask your organisation's administrator.

Coming next

Roles at a site (a user administrator for one site only) and requiring Microsoft for your mail domain come in a later release.

Getting help

Help at the foot of every page has these guides. Talk to us sends a message to our support; we answer within a working day, by mail.

• Signed in: choose the organisation it is About, type Your message and press Send. We see who you are and which organisation it is about, so you needn't explain.
• Not signed in (you can't, or have no account yet): Talk to us at the foot of the sign-in page asks for Your name, E-mail address and Your message. We answer at that address. As on the sign-in page, your browser quietly checks itself while you type.

Exporting and leaving

• Export the organisation (under Advanced, Settings, administrators): its structure, people and their roles, operators, API clients, agents and the audit trail, as files. No password, PIN, badge or secret is in it, only that they exist. Each product exports its own data (labels, print jobs, inspections) from its own pages.
• Close the organisation: type its name to confirm. It stops at once for everyone (no app opens it, nothing prints for it), and every administrator gets a mail. 30 days later everything of it is deleted, in every product. Until then, Keep the organisation undoes it. Invoices are kept as the law requires.
• Your own account stays when an organisation goes: it is yours, and may belong to other organisations.