Permiso Documentation

Welcome! Permiso is the front door to your company. It’s a single place where your team logs in, and where you manage who has access to what. It handles authentication (passkeys; no passwords), user management, and connects to your apps via standard SSO protocols.

If you’re setting up Permiso for the first time, the Getting Started guide is the right place to begin. Most teams are up and running within 30 minutes.

Get started

• Getting Started Create your admin account, configure email, and onboard your first users.
• Quick Setup Checklist A short checklist so you can track your progress from one screen.
• First Login Experience What your users see when they sign up.

How-to guides

• How-to Guides Task-focused guides for adding users, unblocking them, removing access, and reviewing who had access to what.
• Choosing how to add users Five ways to create an account, and what each one commits you to.
• A user can’t sign in Get someone back in after a lost or replaced device.
• Set up a backup passkey For users: register a second passkey so a broken laptop doesn’t lock you out.

Configuration

• Branding Add your logo, set a display name, and pick an accent color.

Users

• Inviting Users Generate signup links and bring your team in.
• Groups Organise users and control which apps each group can access.
• Importing Users Sync users automatically from an LDAP directory.
• Offboarding Safely remove access when someone leaves.

Integrations

• OIDC Overview How Permiso connects to your apps.
• Register an OIDC Client Connect your first application.
• SCIM Provisioning Automatically sync users from your HR system or identity provider.
• API Keys Personal access tokens for users and automated workflows.
• Custom Claims Add extra attributes to the tokens Permiso issues.

Guides

• OIDC Client Authentication Authenticate OIDC clients with federated credentials instead of a client secret.

Security

• Security Overview How Permiso approaches security.
• Passkeys How login with passkeys works and how users manage their credentials.
• Audit Logs A full record of authentication events across your instance.

Reference

• OIDC Endpoints The OpenID Connect endpoints your apps need to know about.

Advanced

• Callback URL Wildcards Match a range of callback URLs using wildcards instead of exact strings.