Quick answer
You create your sign-in from the invitation link, confirm your email address from the message AllDone sends, and set up an authenticator app. From then on every sign-in asks for your password and a code from the app.
When you meet this
Once, when you first join. Everyone at the firm goes through the same steps, whether they set the firm up or were invited by a partner.
How to
Open the invitation link you were sent. The page reads "You've been invited to AllDone" (or "Set up your firm on AllDone" for the partner creating the firm).
Click Sign in to accept (or Continue). Use the email address the invitation was sent to. If you already have an AllDone account, choose Log in on the sign-in screen rather than signing up again.
Create your password, then follow the prompt to set up an authenticator app on your phone. Scan the code shown and enter the six-digit code the app gives you.
Confirm your email address. AllDone sends a confirmation link; open it, then click I've verified - sign in. Until the address is confirmed, sign-in is refused and you see the "Confirm your email address" page.
Accept the invitation on the page that opens. See Accepting an invitation to join your firm on AllDone.
What AllDone does with it
Two-factor sign-in is required on every account because AllDone handles client financial data. A session that was started without a second factor is refused with the message "Multi-factor authentication is required." Signing out and back in prompts you to enrol.
Your email address must be confirmed with the sign-in provider before an invitation can be accepted. A self-registered, unconfirmed address is never enough to join a firm.
Sessions and signing out
After 30 minutes without activity on screen, AllDone warns you and then signs you out. You land on a page headed "Signed out for inactivity"; click Sign in there to start a fresh sign-in. Signing out yourself lands on the same page with the heading "You've been signed out". Always sign in from that button or from app.itsalldone.co.uk, so the sign-in is a genuine fresh one. See Sessions, sign-out and two-factor.
If something looks wrong
The confirmation email has not arrived. Check your spam folder; the link can take a minute or two. The page offers a link to email support if you are still stuck.
"This invitation is for a different email address." You signed in with a different address from the one invited. Sign out and sign in with the invited address.
The sign-in page errors after being left open. A sign-in page left idle goes stale. Go to the signed-out page or app.itsalldone.co.uk and start again.
Related