Users and authentication
Manage who can use your TaruviBase organization and sites, and how your application's users sign in.
TaruviBase has two kinds of users:
- Cloud users are your team. They sign in to TaruviBase Console and belong to your organization.
- Site users are your application's users. Each site has its own site users, who sign in through your app with TaruviBase's hosted sign-in.
Choose the right task#
| Goal | Start here | Supported surface |
|---|---|---|
| Understand identity scope | Cloud and site users | Explanation |
| Add an organization member or synchronize site access | Organization members | TaruviBase Console only |
| Sign users in to your app | JavaScript authentication or Python authentication | JavaScript, Python, Refine |
| Create or manage a site user | Site users | Console, JavaScript, Python, Refine, REST API |
| Assign roles or inspect app access | Assign user access | Console, SDKs, REST API |
| Configure hosted entry pages | Hosted sign-in | Hosted flow |
| Issue or revoke a token | API tokens | TaruviBase Console first |
| Configure enterprise sign-in | OpenID Connect SSO | TaruviBase Console only |
| Create a reusable Site Role | Site roles | TaruviBase Console only |
| Resolve referenced user data | Referenced user attributes | TaruviBase Console only |
| Update the current user's preferences | User preferences | JavaScript, Python, REST API |
The scopes are deliberately different. A cloud user is an identity in the control plane. An organization membership links that identity to an organization. Site access is synchronized from that relationship in the Console. A site user is the identity record that applications query and manage in a selected site.
Supported versions#
Supported versions: TaruviBase API 1.0.0, TaruviBase Console 1.4.0, JavaScript SDK 1.5.4, Python SDK 0.2.3, and Refine providers 1.3.7.
Start safely#
Before managing a site user, confirm the selected site in the Console or the hostname and client configuration in code. Do not treat a cloud user, organization membership, or synchronized site access as a substitute for the site user record.