IdPVault

Sign in

Username
Password
Authenticator code
Username or email

IdPVault

Welcome - create the admin account

Admin username
Password (min 8 chars)
Confirm password

An encryption master key was generated on first boot. Back it up - without it, snapshots are unrecoverable. How-to: Docs → Deployment & proxy (after sign-in).

IdPVault

Welcome - set your password

New password (min 8 chars)
Confirm password

IdPVault

Dashboard

API
Changes · last 14 days
Backup runs · last 14 days
Storage by tenant

Tenants

Requires a Business or MSP license (Administration > License)

Schedules run in the org timezone (Administration > System settings). Backups queue and run one at a time - same-tenant runs never overlap.

NameProviderSlugScheduleKeepActions
Loading…

Tenant details

Loading…

Snapshots -

Timestamp

Browse -

ObjectID

Diff


  

Users & Access -

TimestampUsersMembershipsAssignmentsDurationAPI calls

Activity

WhenChangeTypeObjectSnapshot
Loading…

Tenant settings

Loading…

Your profile -

Account

Change password

Two-factor authentication (TOTP)

Restore -

Snapshot . Preview is read-only. Apply writes changed objects back to the live tenant.

Restore into - default is the same tenant; pick another same-provider tenant to clone/promote

Users & Access restore -

Snapshot . Preview is read-only. Apply is create-only and additive: it recreates missing users and re-adds memberships/assignments; it never modifies or deletes existing users.

Audit log

WhenActorActionDetail

App users

Invite link: emailed if SMTP is configured; either way you get a copyable link. Set password now: no email needed, the account is active immediately - share the password securely.

UsernameEmailRoleStatusActions

Client organizations

OrgContactTenantsUsersBillingRenewalActions

Assign tenants to an org in the tenant form. Org-scoped users (Users page) see only their own org's tenants - org admins can back up and restore them, org viewers are read-only.

Documentation

Pick a topic above.

License

Loading…
After successfully installing a key please hard refresh the page.

Core - security & operations

Set Public URL to your real address (behind a reverse proxy). Only enable Enforce host after confirming the URL works - otherwise you can lock yourself out. Backups queue and run one at a time - same-tenant runs never overlap.

SMTP - optional · invites & email alerts

Alerts - optional

Alerts fire automatically on configuration drift detected and backup failures. They post to this webhook (Slack, Mattermost, Discord, or ntfy) and, if SMTP is configured, also email all admins.

save first, then test