Getting started
Go from a new organization to your first person signing in to an app, on hosted IdRa or your own deployment.
Use hosted IdRa
Start at idra.team/signup: confirm your email, activate your admin account, and a setup wizard covers the steps below. See Self-serve signup. The first two steps are for running your own deployment.
Deploy IdRa
Deploy the image with a Postgres database. See Self-hosting for Railway and Docker. At minimum set NODE_ENV=production, DATABASE_URL, BASE_URL, TRUSTED_ORIGINS, BETTER_AUTH_SECRET, ENCRYPTION_KEY and TRUST_PROXY. Set RESEND_API_KEY and EMAIL_FROM so activation emails are delivered.
To try it locally instead: bun install, bun run admin:create you@example.com "Your Name", then bun run dev and open http://localhost:5173.
Create the first administrator
bun run admin:create you@company.com "Your Name"Open the activation link (emailed, or printed in the log without an email provider), set a password and sign in. Administrators always need MFA, so you're asked to set up an authenticator app or a passkey. The admin console is at /admin.
Turn on security methods
In Security → Authenticators, turn on the methods your people may use (for example IdRa Verify, passkeys, authenticator app). Enrolling alone changes nothing: require MFA in the Global Session Policy or an authentication policy. Optionally make methods required for some groups under Authenticators → Enrollment.
Add people and groups
In Directory → People, add people one by one or import a CSV. Each receives an activation email. Create groups in Directory → Groups and add members by hand or with group rules.
Connect an app
In Applications, pick a preset from the catalog or create an OIDC or SAML app, then assign it to a group on Assignments. Assigned people see it on My Apps at / and can sign in.
Building your own app? The quickstarts cover Next.js, Express, React, Python and Go.
Check the System Log
Reports → System Log shows every sign-in and admin action, with filters and CSV export.