Skip to main content

Organization Setup

This guide covers configuring and managing your organization in LumoAuth.

Getting Your Organization​

When you sign up for LumoAuth, you create an organization during onboarding. Your organization is immediately available at:

https://app.lumoauth.dev/orgs/{your-organization-slug}/portal/

Your organization ID is a URL-safe identifier (e.g., acme-corp) that you chose during signup.

Organization Configuration​

Configure your organization settings through the organization portal at /orgs/{orgId}/portal/.

Authentication Settings​

Navigate to /orgs/{orgId}/portal/configuration/auth-settings to configure:

SettingDescription
Password PolicyMinimum length, complexity requirements, breach detection
Session LifetimeHow long user sessions remain active
MFA PolicyRequired, optional, or adaptive MFA
Account LockoutFailed attempt threshold and lockout duration
RegistrationAllow self-registration or invitation-only
Email VerificationRequire email verification for new accounts

Identity Providers​

Configure external identity providers for your organization:

Provider TypeConfiguration Path
Social Login/orgs/{orgId}/portal/configuration/social-login
SAML 2.0 IdP/orgs/{orgId}/portal/configuration/saml-idp
OIDC Federation/orgs/{orgId}/portal/configuration/oidc-idp
LDAP / Active Directory/orgs/{orgId}/portal/configuration/ldap

Adaptive Authentication​

Configure risk-based authentication at /orgs/{orgId}/portal/configuration/adaptive-auth:

  • Risk score thresholds
  • Trusted IP ranges
  • Impossible travel detection
  • Fraud event webhooks

See Adaptive MFA for details.

Organization Roles​

LumoAuth supports different roles within a organization:

RoleDescriptionTypical Permissions
Organization AdminFull control over the organizationAll organization operations
User ManagerManage users and assignmentsCreate/edit/delete users, assign roles
App ManagerManage OAuth applicationsCreate/edit/delete applications
AuditorRead-only access to logsView audit logs, view users

Assigning Organization Admins​

  1. Go to /orgs/{orgId}/portal/access-management/users
  2. Select a user
  3. Assign the Organization Admin role from the roles tab

Organization Settings via API​

You can also manage organization settings programmatically using the Admin API:

# Update organization authentication settings
curl -X PATCH https://app.lumoauth.dev/orgs/acme-corp/api/v1/admin/settings \
  -H "Authorization: Bearer {access_token}" \
  -H "Content-Type: application/json" \
  -d '{
    "registration_enabled": true,
    "email_verification_required": true,
    "mfa_policy": "optional"
  }'

See the Admin API documentation for the full list of available endpoints.

Organization Data Model​

Each organization owns the following resources: