Skip to content
Astrato

Administrator or above

Ask Nash in Administration

2 min read · Updated 12 Nov 2026

Nash can help you fix sign-in errors, single sign-on (SSO) setup and workspace settings yourself. Describe the problem, and Nash reads this workspace’s configuration, follows Astrato’s procedure for that problem and tells you what is wrong and where to change it. This is the same Nash you use elsewhere in the workspace, in the same panel.

This help is not available in every workspace. If you do not see the Ask Nash card on System settings, it is not enabled for yours.

Ask a question

Section titled “Ask a question”

Before you start: Nash and Nash in Lobby must both be turned on, on the AI tab of System settings. While either is off, the card says so and links to the documentation instead.

  1. Open Administration → System settings. The Ask Nash card is above the tabs.

    The Ask Nash card above the System settings tabs, with Sign-in error, Set up SSO and Nash is missing starters and an Ask Nash button

  2. Select Ask Nash to open the Nash panel beside the page, or select a starter (Sign-in error, Set up SSO or Nash is missing) to ask that question in a new chat.

  3. Describe what went wrong. Paste the exact error message, and the code value from the sign-in page’s address if there is one, for example ?code=11423.

Nash answers with what it found in your settings, the likely cause, and the screen and control where you make the change. You can ask the same questions from Nash anywhere in the workspace.

What Nash reads

Section titled “What Nash reads”

To answer these questions, Nash reads only this workspace, and only for a workspace owner or administrator:

  • Workspace settings that permit or block access and features: Restrict access by IP and its ranges, Force two-factor authentication, external embedding, reporting limits, and the Nash switches and providers.
  • Sign-in setup: each enterprise connection’s name, provider, whether it is verified, its Identity provider domains, issuer and callback URL, and whether SCIM provisioning is on. Client secrets and other provider credentials are never read.

These troubleshooting tools only read. Nash cannot see other users’ sign-in attempts; to diagnose a sign-in that failed for someone else, paste the message and code they saw.

What Nash answers from

Section titled “What Nash answers from”

Nash answers from procedures Astrato maintains for common problems, such as provider errors during SSO sign-in, users who are or are not sent to SSO, an IP address that is not allowed, a disabled account, users who sign in but see no content, password users being signed out after a two-factor change, and Nash not appearing for users. When no procedure covers your problem, Nash says so instead of guessing, and can help you raise it with Astrato support.

Your conversation is an ordinary Nash conversation: it is stored or kept in your browser according to your workspace’s Nash chat storage settings.

Section titled “Related”