Rhino Accounts Help

Your Rhino account provides a single way to use and manage everything McNeel.

You can associate your Rhino licenses (and those of other compatible plugins), participate in our discussion forum, and use other first and third-party services using the same account––even if your email addresses or linked accounts change later.

Rhino Accounts is designed to be secure from the very beginning, and we are continuously improving the security and stability of the system.

Create a New Rhino Account

Creating a Rhino account is easy and free.

Warning
If you have already created a Rhino account before, use it instead of creating a new account. Your new account will not have any services or licenses associated with it. See recover your account if you have trouble logging in to your existing account.

To create a Rhino account:

  1. Go to the Create an Account page.
  2. If you’d like to link an account, click on the appropriate button. Otherwise, click on No Thanks.
  3. Fill out the required information, if any.
  4. Click Create a New Account.
Linked Accounts
Using a linked account, such as Google or Facebook, means that you won’t have to use a password or set up any account information. However, if you choose to use a password, you will need to verify your email address by clicking on a link in an email we will send you after creating your account.

Recover an Existing Rhino Account

If you are unable to log in to your Rhino account, we can send you an email containing tailored information on how to recover your account. If you log in using a linked account, the email will include information on which account you should use to log in. If you log in using a password, you will have the opportunity to reset your password by clicking on a link in the email.

To have Rhino Accounts send you a recovery email:

  1. Go to the Recover Your Account page.
  2. Type in any email address associated with your Rhino account in the Email field.
  3. Click Continue or press the return ⏎ key.
Tip
If you type your password incorrectly repeatedly over a short period of time, you may see the message “This account is temporarily locked out. Please try again later.” You may have to wait up to 24 hours––even if you reset your password––before you can log in again. In addition, if your account has Two-Factor Auth enabled, you will still need to provide the TOTP code to log in. If you do not have a device that generates this code anymore, please contact our support team.

Delete your Rhino Account Permanently

Deleting your account permanently removes all data related to your account from Rhino Accounts.

Danger
Do not delete your account unless you are absolutely sure you have no licenses or services associated with it, including those you would like to use in the future. Access to any product or service will be terminated immediately upon account deletion. Never delete your account attempting to fix an issue with a product or service unless you are specifically told to do so by a McNeel technician.

To permanently delete your Rhino account:

  1. Go to the Delete Account page.
  2. Read any warning messages carefully.
  3. If you are unsure whether you want to delete your account, you probably should not. Contact our support team for help.
  4. Click Delete.

Merge Two Rhino Accounts

You may want to consolidate two different Rhino accounts created at times into one single account to simplify account management. Below is an example of what a typical scenario may look like and what the outcome should be:

To merge two Rhino accounts into a single Rhino account:

  1. Identify the account you want to keep. This account is the one that has all services and products associated with it. In this example, it is account A.
  2. Login to the account you don’t want to keep. In this case, it is account B.
  3. Delete account B. This will free up any linked accounts and email addresses associated with it.
  4. Login to account A.
  5. Associate any email addresses and add any linked accounts that were previously associated with account B.
Info
If both accounts have some service or product associated with it, you need to transfer these from account B to account A before you proceed any further. For example, if both accounts have licenses in Cloud Zoo, you will need to remove all the licenses in account B and add them to account A.

Login to your Rhino Account

To login to your Rhino account:

Type your email address in the Email field. If the field is not visible, click on Other Login Options.

Click the button or press the return ⏎ key.

If you set up your Rhino account with a linked account:

  • Click on the colored button that appears in the middle of the screen.

Otherwise:

Enter your Rhino account’s password .

Click the button or press the return ⏎ key.

If your account has Two-Factor Auth enabled:

  • Enter the TOTP code from your secondary device.
  • Click the button or press the return ⏎ key.
Tip
If you type your password incorrectly repeatedly over a short period of time, you may see the message, “This account is temporarily locked out. Please try again later.” You may have to wait up to 24 hours––even if you reset your password––before you can log in again.
Tip
If you are on your personal device, make sure to check Keep me signed in. This will keep you logged in to your Rhino account even if you close your web browser or restart your device. Never check this option if you are on a public computer.

Manage Emails

To manage emails associated with your account, go to the Emails page. You can add or remove email addresses from this page.

Tip
Your Rhino account can be associated with as many email addresses as you own as long as they are not taken by another Rhino account. If you have accidentally made more than one Rhino account and would like to consolidate them, see merge accounts.

Manage Linked Accounts

To manage linked accounts, such as Facebook and Google accounts associated with your account, go to the Linked Accounts page. You can add or remove linked accounts from this page.

Tip
Associating one or more linked accounts to your Rhino Account allows you to simplify the login process by not requiring you to store or remember a password for your Rhino Account. Also, note that the Two-Factor Auth feature will be bypassed if logging in with a linked account.

Change your Rhino Account’s Password

To change your Rhino account’s password:

  1. Go to the Change Password page.
  2. Enter your current password, if any.
  3. Enter your new password.
  4. Confirm your new password.
  5. Click Save.
Info
If you created your Rhino account with a linked account, your Rhino account might not have a password set. In this case, you will not be asked to enter your current password.

Two-Factor Auth

Two-Factor Authentication, also known as Two-Step Authentication, provides an optional layer of security when logging in to your account. You can choose to require two-factor authentication every time you login to your Rhino account or only when you log in from a new device.

Warning
If you log in using a linked account, two-factor authentication will be bypassed.

To manage Two-Factor Authentication:

  1. Go to the Two-Factor Auth page.
  2. Follow the instructions to enable or disable the system.

Update your Personal Information

You can update personal information associated with your account at any time. To change email addresses and/or linked accounts, see Account Emails and Linked Accounts. Your personal information is kept safe in Rhino Accounts and is not shared with any third parties unless you give explicit permission to do so.

Tip
Some services that use Rhino Accounts cache your personal information. You may need to log out and log in again on such services so that they reflect the updated information.

Update your Profile Picture

To update your profile picture:

  1. Go to the Personal Info page.
  2. Choose a source for your new profile picture. If you have linked accounts, such as Google or Facebook, you may have additional sources to choose from.
  3. Click Save.

Update your Display Name

To update your display name:

  1. Go to the Personal Info page.
  2. Update your name in the Name field.
  3. Click Save.

Update your Phone Number

To update your phone number:

  1. Go to the Personal Info page.
  2. Update your phone number in the Phone Number field.
  3. Click Save.

Update your Preferred Language

To update your preferred language:

  1. Go to the Personal Info page.
  2. Update your language in the Preferred Language field.
  3. Click Save.
Tip
The Rhino Accounts website will be displayed in your device’s language, however, communication via text or email will take place in the language you choose here.

Update your Country of Residence

To update your country of residence:

  1. Go to the Personal Info page.
  2. Update your country in the Country field.
  3. Click Save.

Teams

Teams allow you to associate two or more Rhino accounts into a collaborative entity to share resources, such as Rhino licenses. Anyone can create a team in seconds. There are two ways to add additional team members, either by sending them an invite, or in large organizations, by linking your team to a domain.

View your Teams

You can view which teams you belong to and view your role in each of them at a glance. To view your teams, go to the Teams page.

Tip
You can click on any team to view more information, including its members.

Create a Team

Creating a team is easy and free. To do so:

  1. Go to the Teams page.
  2. Click New Team.
  3. Fill out the required fields.
  4. Click Create a New Team.
Tip
A lonely team is no fun. You can invite users or link your team to a domain immediately upon team creation.

View Team Members

To view the team members in a particular team:

  1. Go to the Teams page.
  2. Click on the team whose members you wish to see.
  3. Scroll down to view the team members. You can sort columns and use the arrow keys ← → to scroll through the list.

Leave a Team

Warning
Leaving a team will prevent you from using any of the team’s resources, such as any licenses associated with it.

To leave a team you belong to:

  1. Go to the Teams page.
  2. Click on the team you wish to leave.
  3. Click on the Action button at the bottom of the page.
  4. Click Leave Team.

Administrative Tasks for Teams

If you are an Owner or an Admin of a team, you can perform all the administrative tasks listed below.

Invite Team Members

By default, a newly created team only includes one member: its owner. To have additional users join your team, you must send them an invite via email as explained below. The email addresses need not be associated with an existing Rhino account––the invitees will have the option to create a Rhino account if they do not already have one.

To invite team members:

  1. Go to the Teams page.
  2. Click on the desired team.
  3. Click on the Action button at the bottom of the page.
  4. Click Invite Members.
  5. Choose the Language the invites will be sent in.
  6. Type or paste the email addresses of the invitees.
  7. Review the email addresses the invites will be sent to.
  8. Click Send.
Info
Using a linked account, such as Google or Facebook, means that you won’t have to use a password or set up any account information. If you choose to use a password, you will need to verify your email address by clicking on a link in an email we will send you after creating your account.

Remove Team Members

Warning
If the team is linked to a domain and the user’s email address belongs to that domain, the user will be given the option to be added again the next time they log in. You will need to remove the user from your domain in order to effectively remove them from the team.

To remove team members from a team:

  1. Go to the Teams page.
  2. Click on the desired team.
  3. Click on the user to remove.
  4. Click Remove from Team.

Modify a Team Member’s Role

To modify a team member’s role:

  1. Go to the Teams page.
  2. Click on the desired team.
  3. Click on the user whose role is to be modified.
  4. Select the appropriate role for the user.
  5. Click Save.

Linking a Rhino Accounts team to a domain is useful in large or complex organizations.

What happens when a Rhino Accounts team is linked to a domain?
  1. Any existing users who have any email address associated with the domain will be given an ultimatum the next time they log in. They can either:
    • Join the team, drop any email addresses unrelated to the domain, and adopt the team’s log-in method.
    • Relinquish any email addresses associated with the domain and decline joining the team.
  2. Any new users who try to log in using an email address associated with the domain will have a Rhino account transparently created for them the first time they successfully log in using the team’s log-in method. They will also be added to the team without the need for an invite.
  3. If new users try to log in or create an account using a different login method, they will be guided to log in using the team’s log-in method.
  4. New or existing accounts that have an email address associated with the domain may not add other email addresses or linked accounts, and their linked account must match the team’s login policy.
Info
It is still possible for team administrators to invite users manually, even in a domain-linked team. This allows special users not associated with the domain to become team members.
  1. Users who have email addresses associated with the domain will be added to the team without the need to create an account and explicitly accept an invitation.
  2. IT administrators can use their own user management tools such as onelogin, Azure Active Directory, Google for Work, etc. to manage team members. For example, an administrator can create an Active Directory group that contains the only members who are allowed to log in to Rhino Accounts. Similarly, removing a user from that group effectively restricts that user from using their Rhino account.
  1. Go to the Teams page.
  2. Click on the desired team.
  3. Click on the Action button at the bottom of the page.
  4. Click on Link Domain to Team.
  5. Check the checkbox.
  6. Type a domain name that you own. Make sure it is the root domain (i.e. rhino3d.com and not www.rhino3d.com) unless your email server purposefully uses a subdomain.
  7. Place the specified file at the specified location in your domain’s HTTP server. Make sure it can be publicly accessed.
  8. Choose a login method. For the following providers, you will need to specify additional configuration settings specific to your domain:
  9. Click Save.
Set up Azure Active Directory
  1. Go to the Azure Portal and log in to the desired directory.
  2. Click on the Azure Active Directory blade.
  3. Click on App Registrations.
  4. Click on New Registration.
  5. Create a new application with the following settings:
    • For Name, enter something like Rhinoceros or Rhino 3D.
    • For Supported Account Types, select Accounts in this organizational directory only.
    • For Redirect URI, select Web, then enter the Redirect URI shown in Rhino Accounts.
  6. Once the application is created, copy the Application (client) ID value shown and paste it into the Client/App ID field in Rhino Accounts.
  7. Back in the Azure Portal, copy the Directory (tenant) ID value shown and paste it into the Endpoint field in Rhino Accounts.
  8. Back in the Azure Portal, click on the Authentication blade.
  9. Make sure that ID Tokens is checked under Implicit grant and hybrid flows, and save your changes.
Set up onelogin
  1. Go to onelogin, and log in to the desired domain.
  2. Hover over the Apps button.
  3. Click on Custom Connector.
  4. Click on New Connector.
  5. Create a new connector with the following settings:
    • For the connector name, enter something like Rhinoceros or Rhino 3D.
    • For Sign on Method, select OpenID Connect.
    • For Redirect URI, enter the Redirect URI shown in Rhino Accounts.
    • For Login URL, enter https://accounts.rhino3d.com.
    • Click Save.
  6. Once the connector is created, hover over More Actions then click Add App to Connector.
  7. Click Save.
  8. Once the app is created, click on SSO.
  9. Copy the value shown in Client ID.
  10. Back in Rhino Accounts, paste the value into the Client/App ID field.
  11. Back in onelogin, copy the first subdomain of the uri provided in the Request URI Example. For instance, if https://test.onelogin.com/oidc/auth?... is shown, copy test.
  12. Back in Rhino Accounts, paste the value copied into the Endpoint field.
Set up Okta
  1. Go to Okta and log in to your organization’s domain.
  2. Click on Applications in the main menu.
  3. Click on the Add Application button.
  4. Select Single-Page App, and click next.
  5. Create a new application with the following settings:
    • For the name, enter something like Rhinoceros or Rhino 3D.
    • For Base URIs, enter https://accounts.rhino3d.com.
    • For Login Redirect URIs, enter the Redirect URI shown in Rhino Accounts.
    • For Grant type allowed, make sure Implicit is enabled.
    • Click Done.
  6. Once the application is created, copy the Client ID under Client Credentials.
  7. Back in Rhino Accounts, paste the value into the Client/App ID field.
  8. Back in Okta, Click on Dashboard in the main menu.
  9. Copy the Org URL excluding the protocol. For instance, if https://test.okta.com is shown, copy test.okta.com.
  10. Back in Rhino Accounts, paste the value copied into the Endpoint field.
  11. Back in Okta, Click on Trusted Origins under the API menu item.
  12. Ensure that there is an entry for https://accounts.rhino3d.com for both CORS and Redirect. If there isn’t one, add an origin by clicking Add Origin.
Set up Custom Provider
  1. The custom provider you choose to use must meet the following criteria:
    • It must be an OpenID Connect provider.
    • It must implement OpenID Connect’s Discovery Endpoint at the path: /.well-known/openid-configuration.
    • The Discovery Endpoint must include a valid jwks_uri.
    • The Discovery Endpoint must have CORS support so that it can be accessed from https://accounts.rhino3d.com via JavaScript.
    • It must support the implicit grant type.
    • It must support the id_token response type.
  2. Register an OpenID Connect client with your provider, being sure to include the Redirect URI shown in Rhino Accounts.
  3. Back in Rhino Accounts, paste the client id of the client you just created into the Client/App ID field.
  4. Finally, enter the base url of your provider into the Endpoint field. For example, if the Discovery Endpoint is at https://mydomain.com/oidc/.well-known/openid-configuration, you would enter mydomain.com/oidc.
Info
****You must be familiar with the OpenID Connect protocol if you choose to go this route. We cannot provide detailed support if you choose to use a custom provider. You are responsible for the compliance and upkeep of your custom provider’s infrastructure.

Permissions

Rhino accounts keeps all your information confidential by default. For any service or product (called app in this section) to access your account information, you must explicitly consent to do so. You can view which apps you have given permission to access some or all of your account information and revoke these permissions at any time.

View Apps That Have Access to your Account

To view all the apps that have access to your account:

  1. Go to the Permissions page.
  2. Click on the service or product of interest.

Revoke an App’s Permission to Access your Account

To view all the apps that have access to your account:

  1. Go to the Permissions page.
  2. Click on the app of interest.
  3. Click Revoke Access.

Licenses

You can use your Rhino account to use Cloud Zoo, a free service that allows you to associate license keys for Rhino and other products to your Rhino account or one of the teams your Rhino account belongs to. You can then use your Rhino account to log in and use these products on any device, anywhere in the world. Learn more about Cloud Zoo…

Tip
To add or remove licenses from Cloud Zoo, see this page.

Browser Requirements

Rhino Accounts works only in modern browsers to ensure the highest security standard for you. All browsers must have cookies and JavaScript enabled for Rhino Accounts to work properly. The following browsers are supported:

Browser Version Supported
Apple Safari Latest Version
Google Chrome Latest Version
Microsoft Edge Latest Version
Microsoft Internet Explorer 11
Mozilla Firefox Latest Version
Opera Latest Version