The transition from Mavenlink to Kantata OX has left some users questioning where to log in and how to manage their credentials. Following the merger with Kimble Applications, the platform formerly known as Mavenlink was rebranded as Kantata OX. While the name has changed, the core infrastructure for accessing your projects, tasks, and resource management tools remains robust.

If you are trying to find the Kantata login page or are encountering errors such as "Login is not enabled for this user," this comprehensive guide provides the specific steps and technical solutions required to regain access to your workspace.

Understanding the Rebrand from Mavenlink to Kantata OX

Before diving into the technical login procedures, it is essential to clarify the current state of the software. Mavenlink is now formally known as Kantata OX. This rebranding effort was part of a strategic merger designed to combine industry-leading project management capabilities with advanced resource optimization.

For existing users, this means that while you might still see "mavenlink.com" in some URLs, the branding within the application and the support documentation will reflect the Kantata name. Your existing Mavenlink credentials—email and password—remain valid for the Kantata OX platform.

Standard Login Methods for Desktop Users

Accessing your Kantata OX dashboard depends on how your specific organization has configured its account. There are three primary ways to log in via a desktop browser.

Using the Primary Login URL

The most direct way to access the platform is through the standard application URL.

  1. Navigate to the official login page at app.mavenlink.com.
  2. Enter the email address associated with your professional account.
  3. Input the password you established during your initial setup.
  4. Click the "Log In" button.

This method works for the majority of users who do not utilize customized domains or specialized security integrations.

Accessing Custom Branded Company URLs

Many Enterprise and Premier organizations use a custom-branded login page to maintain consistency with their internal infrastructure. These URLs typically follow a subdomain format, such as companyname.mavenlink.com.

If your organization uses a custom URL, you must use that specific address to log in. Using the standard app.mavenlink.com might fail if your company has enforced strict login protocols for its specific subdomain. To find your unique company URL, refer to the "Welcome to Kantata" email sent to you when your account was first created. If that email is unavailable, consult your internal IT department or your Kantata Account Administrator.

Navigating the SSO and Third-Party Login Process

For organizations prioritizing security and centralized user management, Single Sign-On (SSO) is the standard protocol. SSO allows you to log in using your company’s primary identity provider (like Okta, Microsoft Azure AD, or Google Workspace) without needing a separate Kantata-specific password.

To log in via SSO:

  1. Go to your organization's custom Kantata URL or the standard login page.
  2. Look for the button or link labeled "Or sign in with a 3rd-party service" or a specific SSO provider button.
  3. You will be redirected to your company’s internal authentication portal.
  4. Enter your corporate credentials. Upon successful authentication, you will be automatically redirected back to your Kantata OX dashboard.

Setting Up Your Account for the First Time

If you are a new user, you cannot simply go to the login page and create an account. You must be invited by an existing Account Administrator within your organization.

The Invitation Email and 60-Day Window

Once an administrator adds you to the system, you will receive an automated invitation email. This email contains a critical "Accept Invite" button.

  • The 60-Day Limit: The invitation link is only valid for 60 days. If you do not click the link and set up your account within this timeframe, the link will expire for security reasons.
  • The Process: Clicking "Accept Invite" takes you to a secure page where you will set your initial password. Once the password is saved, your account becomes active.
  • SSO Exception: If your company uses SSO, you will still receive an invitation email, but you may not be required to set a password. Instead, clicking the link will simply verify your identity and link your corporate SSO account to the Kantata platform.

Managing and Resetting Your Password

Password issues are the most frequent cause of login failures. Kantata provides two ways to handle password management: from outside the system and from within the user settings.

Resetting a Forgotten Password from the Login Page

If you cannot remember your credentials, do not attempt multiple incorrect logins, as this may lead to a temporary account lockout.

  1. Go to the login page at app.mavenlink.com.
  2. Select the "Forgot Your Password?" link located below the login fields.
  3. Enter your registered email address and click "Send Reset Link."
  4. Check your inbox for the reset email. Ensure you check your spam or junk folders if it does not arrive within a few minutes.
  5. Click the link in the email, enter a new secure password, and confirm it.

Updating Your Password Within the Kantata App

If you know your current password but wish to change it for security reasons:

  1. Log in to Kantata OX.
  2. Click your profile picture or avatar in the top-right corner of the application.
  3. Select "Password & Authorizations" from the drop-down menu.
  4. Click "Send a password reset email."
  5. Follow the instructions sent to your email to finalize the change.

Resolving Frequent Kantata Login Errors

Technical errors during login can be frustrating, but they usually point to specific configuration issues that can be resolved with the help of an administrator.

What to Do When "Login Is Not Enabled for This User"

This is one of the most common errors reported by users. It does not necessarily mean your password is wrong; rather, it indicates a permission setting.

  • The Cause: Within Kantata, every user profile has a toggle for "Can Login." If this is turned off, the user is effectively barred from the system even with valid credentials. This often happens during initial onboarding or if a user’s role has recently changed.
  • The Solution: You cannot fix this yourself. You must contact your company’s Account Administrator. The admin needs to go to the "Members" list in the settings, find your name, and ensure the "Can Login" permission is checked.

Troubleshooting "Incorrect Email or Password" Messages

While it seems straightforward, this error can sometimes be deceptive.

  1. Verify the URL: Ensure you are not trying to log in at a custom URL belonging to a different organization.
  2. Check Case Sensitivity: While email addresses are generally not case-sensitive, passwords are. Ensure your Caps Lock key is off.
  3. Confirm the Registered Email: Sometimes users have multiple professional emails (e.g., .com vs .org). Confirm with your admin which specific email was used to create your Kantata profile.

Fixing "Access Blocked: Authorization Error"

This error is almost exclusively tied to SSO (Single Sign-On) configurations. It occurs when there is a mismatch between the data sent by your company's identity provider and what Kantata expects.

  • Common Reason: The "NameID" or email attribute in your company's SAML settings does not match the email address registered in Kantata.
  • Admin Action: The administrator must verify that the SAML configuration (SAML 2.0) is correctly mapped and that your user account is authorized within the identity provider's dashboard (e.g., Okta).

Addressing Deactivated User Accounts

If you see a message stating "This user account is not active," it means your profile has been deactivated by an administrator. This usually occurs when a contractor’s project ends or an employee leaves the company. If this is an error, your Account Administrator can reactivate your account through the Member Settings.

Using Kantata on Mobile Devices

Kantata OX offers a mobile-optimized experience that allows team members to track time, manage expenses, and communicate on the go.

Accessing the Mobile Browser Version

There is no dedicated "app store" application for Kantata OX that mirrors the full desktop experience; instead, the platform is accessed via a mobile-optimized web app.

  1. Open the browser on your mobile device (Safari for iOS, Chrome for Android).
  2. Navigate to m.mavenlink.com.
  3. Enter your login credentials as usual.
  4. For easier access, you can "Add to Home Screen" from your browser settings to create a shortcut that functions like a native app.

Note for iPad Users: If you are using an iPad, the system is designed to handle the full desktop version rather than the mobile site. Access app.mavenlink.com on your iPad via Safari or Chrome for complete functionality.

Key Features Available on Mobile

The mobile interface is streamlined for efficiency. Once logged in, you can access:

  • Time Tracking: Start and stop timers for billable tasks while away from your desk.
  • Expense Management: Use your phone’s camera to take photos of receipts and upload them directly to a project.
  • Activity Feed: View project posts, reply to team members, and stay updated on task progress.
  • Task Tracker: View, edit, and create tasks, deliverables, and milestones.

Administrative Controls for Login Issues

If you are an Account Administrator, you have the power to resolve most login issues for your team. Here are the tools at your disposal:

Verifying User Permissions

To check if a user is authorized to log in:

  1. Navigate to the "Settings" gear icon in the left-hand navigation.
  2. Select "Members."
  3. Use the search bar to find the specific user.
  4. Click on their name to view their profile details.
  5. Ensure the "Can Login" checkbox is enabled.
  6. If the user is missing, you may need to re-invite them.

Managing SAML and Security Settings

For Enterprise accounts using SSO, the security tab is the control center for login protocols.

  • Strict SSO: You can choose to "Restrict authentication to SAML users only." If this is checked, users will not be able to log in using a standard Mavenlink password; they must use your company's SSO.
  • X.509 Certificates: If your SSO suddenly stops working for all users, it is likely that your SAML certificate has expired or needs to be re-uploaded in the Kantata Security settings.

Summary of Key Login Information

Navigating the login process for Kantata (formerly Mavenlink) is simple once you understand the specific requirements of your organization's account.

  • Standard URL: app.mavenlink.com
  • Mobile URL: m.mavenlink.com
  • Rebrand: Mavenlink is now Kantata OX.
  • New Users: Must accept the email invite within 60 days.
  • Troubleshooting: Most "Login not enabled" errors require an Account Administrator to update member permissions.
  • SSO: Requires a custom domain and specific 3rd-party authentication.

By ensuring you are using the correct URL and that your account permissions are active, you can maintain seamless access to your project management tools. If standard troubleshooting fails, always start by checking with your internal IT or Kantata Administrator to verify your specific account status.

Frequently Asked Questions About Kantata Login

Can I still use my old Mavenlink bookmarks?

Yes, most old Mavenlink bookmarks will automatically redirect to the current Kantata OX URLs. However, it is recommended to update your bookmarks to app.mavenlink.com to avoid unnecessary redirect delays.

Why didn't I receive my password reset email?

The most common reason is the email being caught in a spam or "Promotions" filter. Additionally, if you enter an email address that is not registered in the system, Kantata will not send a reset email for security reasons (to prevent "fishing" for valid usernames). Ensure the email matches your account exactly.

Is the login process different for Kantata OX and Kantata SX?

Yes. This guide focuses on Kantata OX (formerly Mavenlink). Kantata SX (formerly Kimble) is a separate product built on the Salesforce platform, which typically requires logging in through your Salesforce instance or a specific SX login portal.

What should I do if my invite link has expired?

If the 60-day window has passed, the "Accept Invite" link will no longer work. You must ask your Account Administrator to "Resend Invitation" from the Member Settings menu in Kantata.

Does Kantata support Multi-Factor Authentication (MFA)?

Yes. If your company uses SSO, MFA is handled by your identity provider (like Okta or Google). For users not using SSO, administrators can often enforce security protocols or users can utilize integrated 3rd-party login services that provide their own MFA.