How-to Guides

Short, task-focused guides for the things you actually need to do: bringing someone in, getting someone unstuck, taking access away, and proving after the fact who had access to what.

Each guide starts from a situation rather than a feature, so if you’re here because something has just happened, start with the heading that matches it.

Bringing people in

• Choosing how to add users Five ways to create an account, and what each one commits you to.
• Inviting Users Generate a signup link so someone can create their own account and passkey.
• Importing Users Sync accounts automatically from an LDAP directory.
• Groups Put users into groups and control which applications each group can reach.

When something goes wrong

• A user can’t sign in Get someone back in after a lost or replaced device, and stop it recurring.
• Set up a backup passkey For users: register a second passkey so a broken laptop doesn’t lock you out.

Taking access away

• Offboarding What to do when someone leaves, and what disabling and removing an account each actually do.

Checking who had access

• Audit Logs Review authentication events across your instance, filtered by user, event type, or date.
• Passkeys How passkey login works and how users manage their own credentials.