# Getting started (https://docs.idra.zone/docs/getting-started)

Go from a new organization to your first person signing in to an app, on hosted IdRa or your own deployment.

**Use hosted IdRa**

  Start at [idra.team/signup](https://idra.team/signup): confirm your email, activate your admin account, and a setup wizard covers the steps below. See [Self-serve signup](https://docs.idra.zone/docs/multi-tenancy#self-serve-signup). The first two steps are for running your own deployment.

## Deploy IdRa

Deploy the image with a Postgres database. See [Self-hosting](https://docs.idra.zone/docs/self-hosting) for Railway and Docker. At minimum set `NODE_ENV=production`, `DATABASE_URL`, `BASE_URL`, `TRUSTED_ORIGINS`, `BETTER_AUTH_SECRET`, `ENCRYPTION_KEY` and `TRUST_PROXY`. Set `RESEND_API_KEY` and `EMAIL_FROM` so activation emails are delivered.

To try it locally instead: `bun install`, `bun run admin:create you@example.com "Your Name"`, then `bun run dev` and open `http://localhost:5173`.

## Create the first administrator

```sh
bun run admin:create you@company.com "Your Name"
```

Open the activation link (emailed, or printed in the log without an email provider), set a password and sign in. Administrators always need MFA, so you're asked to set up an authenticator app or a passkey. The admin console is at `/admin`.

## Turn on security methods

In **Security → Authenticators**, turn on the methods your people may use (for example IdRa Verify, passkeys, authenticator app). Enrolling alone changes nothing: require MFA in the [Global Session Policy or an authentication policy](https://docs.idra.zone/docs/admin/policies). Optionally make methods required for some groups under **Authenticators → Enrollment**.

## Add people and groups

In **Directory → People**, add people one by one or import a CSV. Each receives an activation email. Create groups in **Directory → Groups** and add members by hand or with [group rules](https://docs.idra.zone/docs/admin/groups#group-rules).

## Connect an app

In **Applications**, pick a preset from the catalog or create an [OIDC](https://docs.idra.zone/docs/admin/oidc) or [SAML](https://docs.idra.zone/docs/admin/saml) app, then assign it to a group on **Assignments**. Assigned people see it on **My Apps** at `/` and can sign in.

Building your own app? The [quickstarts](https://docs.idra.zone/docs/quickstarts) cover Next.js, Express, React, Python and Go.

## Check the System Log

**Reports → System Log** shows every sign-in and admin action, with filters and CSV export.