Who can do what
Control access, logins and changes in one place
Give each teammate only the access their job needs
Finance runs payouts, support looks up promoters and an agency contractor works on one campaign
Keep reward rates and your API key out of reach for anyone who doesn’t need them
Limit a teammate to specific campaigns and they never see the rest
Add a second step to logins that can move money
Your team sends payouts and your affiliates store the PayPal or bank details you pay into
Make 2FA mandatory for your whole team with an authenticator app or email codes
Let affiliates turn on 2FA for their portal login too
See who changed what and when
A changed reward rate or payout email shows up in the activity log
Each entry shows the person or integration behind the change and the old value
Find out who changed it in one search, without asking around the team
14-day free trial. No credit card required.
Excellent experience. The platform is well built. Every feature where I think “oh, it would be good if they have that”, I check, and they have it. The tracking seems to be robust, which makes payouts easy. And the support is excellent.
Set up your team in four steps
From invite to audit trail
Invite your team
Add finance, support or an outside agency to FirstPromoter by email, then pick a role for each person or add them to a team that already has one.
Set what each role can do
Choose read, create, update or delete for each area of the account, from promoters and rewards to payouts, billing and settings. Restrict any member to the campaigns they work on.
Protect the sign-in
Team members confirm with an authenticator app or an emailed code. On Enterprise, your SAML identity provider can become the only way in.
Review the trail
Changes land in the activity log under the person, affiliate or integration that made them, ready to search when a number looks off.
14-day free trial. No credit card required.
Payouts sit behind a second verification step
Payout method verification is on by default for accounts created since April 2025. Affiliate 2FA stays optional until you require it.
Verified payout runs
A verification step protects your payout runs, using the same authenticator app or emailed code as sign-in.
Payout detail changes
With payout method verification on, affiliates need an emailed code to change their payout method or email.
Affiliate 2FA
Require affiliate 2FA and payout details stay locked until each affiliate turns it on.
What you control
Four controls over access to your account
Give a whole department the right access in one step
Assign a role to a team and everyone in it inherits it, including the next person you add. Nobody can grant a role above their own and a role that is still in use can’t be deleted.
Add a second factor to team and affiliate logins
Team members use an authenticator app or an emailed code and the account owner can make 2FA mandatory. Affiliates choose an authenticator app or email codes and get single-use backup codes for a lost phone.
Sign your team in through Okta, Entra or Google Workspace
Connect your SAML 2.0 identity provider in the dashboard settings and switch SSO on. Turn on enforce mode and sign-in runs only through your provider, so removing someone there removes their way in.
Check the old and new value of each change
Each entry names the team member, affiliate, API integration or automated process behind a change and shows the before and after values. Sensitive fields show as changed without their contents and you can filter by person, action, date or field, then export to CSV.
14-day free trial. No credit card required.
Submagic
Since launching their affiliate program on FirstPromoter, Submagic has generated €1,635,717 in total revenue and built a network of 9,000+ promoters.
Partner-attributed monthly revenue tracked
Subscription businesses
Average setup time
Rated by verified users
Related Features
Payouts
Affiliate payout software
Pay one affiliate or the whole program in one send, with a verification step on every payout run.
Customization
Affiliate marketing API
Pull program data into your own systems and get webhook events as changes happen.
Reporting
AI assistant and MCP server
Ask your program questions in plain English, inside the role and campaign access of the person asking.
Guides and Documentation
Help doc
Team roles and permissions
How the built-in roles differ, how to build a custom role and how to limit a member to specific campaigns.
Help doc
How to set up two-factor authentication (2FA)
Setting up an authenticator app or email codes, requiring 2FA for your team and verifying direct payouts.
Help doc
Set up single sign-on (SSO)
Connecting a SAML 2.0 identity provider, testing the connection and turning on enforce mode.
Frequently Asked Questions
Don’t see the answer you need?
That’s ok. Just drop a message and we will get back to you ASAP.