# Security: Single-Use Magic-Link Sign-In Claims

Published 2026-11-02

> Magic-link sign-in now exchanges a single-use, tenant-bound claim for a separate staff session.

![magic-link-session-claims.png](https://officenext.erxes.io/gateway/read-file?key=office-erxes-io%2FiWOPGfbdFWqeOBH2xTGEVmagic-link-session-claims.png)

Magic-link sign-in now uses a claim that can be consumed only once and is tied to the organization. After verification, sign-in creates a separate staff session.

The link’s sign-in state is no longer reused as the session token. This separates the one-time sign-in step from ongoing access to the workspace.

Available in erxes v3.4.7, released October 29, 2026.