5.3 KiB
| title |
|---|
| Users |
What are users
In ZITADEL there are different users. Some belong to dedicated organisations other belong to the global organisations. Some of them are human users others are machines. Nonetheless we treat them all the same in regard to roles management and audit trail.
Human vs. Service Users
The major difference between human vs. machine users is the type of credentials who can be used. With machine users there is only a non interactive logon process possible. As such we utilize “JWT as Authorization Grant”.
TODO Link to “JWT as Authorization Grant” explanation.
How ZITADEL handles usernames
ZITADEL is built around the concept of organisations. Each organisation has its own pool of usernames which include human and service users.
For example a user with the username road.runner can only exist once the organisation ACME. ZITADEL will automatically generate a "logonname" for each user consisting of {username}@{domainname}.{zitadeldomain}. Without verifying the domain name this would result in the logonname road.runner@acme.zitadel.ch. If you use a dedicated ZITADEL replace zitadel.ch with your domain name.
If someone verifies a domain name within the organisation ZITADEL will generate additional logonames for each user with that domain. For example if the domain is acme.ch the resulting logonname would be road.runner@acme.ch and as well the generated one road.runner@acme.zitadel.ch.
Domain verification also removes the logonname from all [users](administrate#Users who might have used this combination in the global organisation. Relating to example with
acme.chif a user in the global organisation, let's call himcoyoteusedcoyote@acme.chthis logonname will be replaced withcoyote@randomvalue.tldZITADEL notifies the user about this change
Manage Users
Search Users
Image 1: User List Search
Create Users
Set Password
Screenshot here
Manage Service Users
Screenshot here
Manage User Authorisations
Screenshot here
Manage User ZITADEL Roles
Audit user changes
Screenshot here