# Authenticated Pages

> Superflow is installed on your site, so review works behind passwords, Okta, and SSO. Your client reviews their gated portal with no Superflow account.

This is the Markdown copy of https://usesuperflow.ai/authenticated-pages, published for AI agents and scripts. The HTML page is canonical.

## Key facts

| Field | Value |
| --- | --- |
| Page type | Feature page |
| URL | https://usesuperflow.ai/authenticated-pages |
| Feature | Authenticated Pages |
| Promise | Review every page behind a login |
| Capabilities documented | 4 |

## What this does

Superflow is installed on your site, not a proxy. Review works wherever the viewer is logged in: password, Okta, SSO. Client portals, member areas, and staging included.

Both halves of the work, reviewed

Superflow installs on the site itself, so review runs behind passwords, Okta, and SSO - wherever the viewer is logged in.

## Capabilities

Superflow gets you from Locked Out to Signed Off.

| Capability | What it does |
| --- | --- |
| On the site, not a proxy | Superflow loads with the page inside the viewer's own session, so the login never blocks a review. |
| Password, Okta, SSO | If your users can log in, review works there - on staging, portals, member areas, and intranets. |
| Your client, logged in | Your enterprise client reviews their gated dashboard from inside their own system. |
| Full parity | Gated pages get the same review process, audit trail, and snapshots as public ones. |

## Detail

- **On the site, not a proxy: Review inside the login.** Superflow loads with the page, inside the viewer's own session.
- **On the site, not a proxy: One snippet for IT.** IT approves one snippet once - no browser extensions, no proxy fetching your page.
- **On the site, not a proxy: Credential-free review.** Superflow never sees or stores a password; the viewer's own session authenticates.
- **Password, Okta, SSO: Password, Okta, SSO.** If your users can log in, review works there.
- **Password, Okta, SSO: Staging behind basic auth.** Password-protected staging gets the same review as the live site.
- **Password, Okta, SSO: Portals, member areas, intranets.** The pages only logged-in users see, reviewed in place.
- **Your client, logged in: Client review on their own portal.** Your client opens their gated dashboard logged into their own system and approves - no Superflow account.
- **Full parity: One review process, everywhere.** Comments, threads, approvals, and the audit trail behave identically on gated and public pages.
- **Full parity: Snapshots behind the login.** Automatic screenshots capture gated pages too, from inside the session, so every comment keeps its proof.

## How to start

Three steps, no engineer required.

1. **One snippet on the site, in 30 seconds.** That's why auth works: review runs in the viewer's session.
2. **Open the gated page logged in, and comment.** Invite your team and your client - no account needed.
3. **Your client approves from inside their portal.** No Superflow account, and the decision is recorded.

## Questions and answers

### Does Superflow see or store my users' credentials?

No. The login happens between your user and your site, the same as when Superflow is not there. Review runs where the viewer is already logged in, and no password passes through Superflow.

### Which auth types does it work behind?

Password-protected sites, Okta, and SSO. Because Superflow is installed on the site itself, the login in front of it does not change how review works.

### Does it work on staging behind basic auth?

Yes. A password-protected staging site gets the same review as production: comments in place, approvals, the full audit trail.

### Can my enterprise client review their gated portal without a Superflow account?

Yes. They stay logged into their own system, not ours, and review from a link: no account, no login, no app, from their phone.

### Why do proxy or snapshot tools break behind my login?

They load your page through a proxy or a snapshot, and their servers are not logged in to your site. Superflow runs on the site itself, so there's nothing between the viewer and the page.

### What does IT need to approve?

One snippet on the site, the same class of install as an analytics tag. No reviewer extensions, no proxy in the network path.

### Is this SOC 2 and HIPAA relevant?

If your gated pages carry patient, member, or financial data, yes. Superflow's controls, SOC 2 Type II, and HIPAA with a BAA are documented on the trust page.

### What does authenticated-pages review cost?

Nothing separate. It's how the product works: one install covers the public and gated halves of a site.

## Related pages

Each of these also publishes a Markdown copy at its own path plus `.md`.

- [Automatic screenshots](https://usesuperflow.ai/screenshots) - The capture that backs every comment, behind the login included.
- [Client review](https://usesuperflow.ai/client-review) - The no-account link; here the client is logged into their own system.
- [Trust](https://usesuperflow.ai/trust) - Where credentials, SOC 2, and HIPAA get their full answers.

## About Superflow

Superflow is a website and creative-asset review tool. Its agents watch every page of a site, report what changed, and route findings to the people who approve them. Teams leave contextual feedback on live sites, staging environments, PDFs, images, videos, and Lottie animations, and comments sync two-way with Asana, ClickUp, Monday, Slack, Webflow, and Google Tag Manager.

Machine-readable entry points:

- Site index: https://usesuperflow.ai/llms.txt
- Full site content in one fetch: https://usesuperflow.ai/llms-full.txt
- Free tools, with a Markdown copy of each: https://usesuperflow.ai/tools.md
- MCP server (Streamable HTTP, no account and no API key): https://usesuperflow.ai/api/mcp
- Agent card: https://usesuperflow.ai/.well-known/agent-card.json