Core Concepts

You can ship a working integration without reading every doc, but you can't skip these seven words: organization, application, tenant, user, role, provider, Universal Login. This page maps them all in one place.

Organization (your company)
└── Application (your product)
    ├── Auth Providers   ← how users sign in
    ├── Users            ← who signs in
    ├── Roles            ← what they can do
    ├── Tenants?         ← optional, for multi-tenant SaaS
    └── Branding         ← your logo, colors, domain

Organization#

The top-level container — one per Authaz customer. It owns billing, team members, and all of your applications. You'll only ever see your own organization through normal API calls; the platform never crosses the boundary.

You don't pick an organization ID when calling the API. The API key (or JWT) you use already belongs to one, and Authaz scopes everything automatically.

Application#

An application is a product or service you're building. Each application gets its own:

• Auth providers (password, OAuth, magic link, etc. — enable per app)
• User pool (users live in one application)
• Roles and permissions
• Branding and Universal Login customization
• Custom domain (auth.yourapp.com)
• API keys for programmatic access

One organization can run several applications. A common split is Customer Portal + — same company, different products, different sign-in surfaces.