Skip to content

Console tour

Find your way around the Authio console: the navigation, the realm selector, the main areas, built-in help and the AI advisor, and what an account on the Dedicated plan sees.

The console is where your team configures and operates Authio. It is an Authio application itself: you sign in through Authio’s hosted login with your own user, and its screens are built on the same Admin API your automation can call.

What you see depends on your account role and on your plan. This page walks through the layout first, then the areas of the console, and ends with the screens an account on the Dedicated plan gets instead.

The layout

Every screen shares the same frame: a sidebar on the left, which you can collapse to icons or widen by dragging its edge, and a top bar with the realm selector, search, the Guide, notifications, language, theme and your account menu. On narrow screens the sidebar becomes a drawer.

Sidebar sectionEntries
(no heading)Dashboard
TenancyRealms, Clients, Resource Servers, Organizations, Identity Providers, Connection Providers, Migration
IdentityUsers, Suspensions, Consumers, Delegations, Groups, Permissions (Global Roles and Global Scopes)
SecuritySigning Keys, API Secrets
Developer ToolsProviders, Token Inspector, Wire Bench
ObservabilitySessions, Live Auth Stream, IP Approvals, Push Authenticator, Webhooks, Audit
AccountSettings (Profile, Security, Notifications), Team, Subscription

Type in Filter menu… at the top of the sidebar to narrow the list down by name or description.

The realm selector

Most screens read one realm at a time. The selector at the left of the top bar decides which one: pick a realm, or All realms to see every realm of the account together. The choice is remembered in your browser and shared across tabs, and a ?realm= parameter in the address takes precedence when you open a link.

Search and keyboard shortcuts

The command palette finds realms, clients, users and keys by name, jumps to any screen, starts creating a record and switches the realm in scope. Open it from the search field in the top bar or with the keyboard:

KeysWhat they do
Ctrl + K (⌘ + K on a Mac)Open the command palette
?Open the Guide on the current screen
G, then a letterGo to a screen: D Dashboard, R Realms, C Clients, U Users, N Consumers, O Global Roles, P Global Scopes, K Signing Keys, A Audit, E API Secrets, T Token Inspector, S Settings
COn a list, open the form for a new record
Ctrl + S (⌘ + S on a Mac)Save, on an edit screen

The dashboard

The Dashboard is where you land after signing in. Each block appears only to the roles that can read what it shows:

  • Alerts: sign-ins waiting for an IP approval, the trial goal while the account is on its free trial, and the welcome credit left.
  • Getting started: a checklist of the pieces every setup needs — a realm, a client, a user, and the roles or scopes they hold.
  • Activity: authenticated accesses over the period you choose, where they came from, and the latest configuration changes.
  • What the account holds: realms, clients, users, consumers and how the clients authenticate.
  • Plan and usage: the plan, the quota closest to its ceiling and the estimated cost of the period.
  • AI advisor: the latest reading of the realms where the advisor is on, when your plan includes it.
  • Suspensions: who is held back now, and what is scheduled.

Lists, records and edits

The screens for realms, clients, users and the other records follow one pattern, so learning one teaches the rest:

  • Lists open with a collapsible overview of the records — counts, rankings, how many are active — above the records themselves, which you can search, filter and lay out in different ways.
  • Clicking a record opens a side panel with its details, without leaving the list.
  • The view of a record shows everything about it, and holds the actions that take effect on their own, such as rotating a secret, ending a session or revoking a key.
  • The edit screen holds the form. Saving keeps you on it, so you can go on adjusting.
  • Creating is never blocked by the realm in scope: the form asks for the realm and client it needs.
  • Deleting asks you to type the record’s name first.

Where things live

AreaScreensWhat you do there
RealmsRealmsCreate realms, check how ready each one is for production, set password and lockout rules, and decide whether support may act as a user.
Applications and APIsClients, Resource ServersRegister apps and APIs: redirect URIs, grants, sign-in steps, tokens and keys. Each client has an integration guide filled in with its real values.
PeopleUsers, Groups, Suspensions, OrganizationsCreate and manage users, give roles to groups of them, hold access back for a period, and serve your business customers.
Machines and agentsConsumers, Delegations, Connection ProvidersGive services credentials of their own, decide what agents may do on someone’s behalf, and let users connect external accounts.
PermissionsGlobal Roles, Global ScopesDefine roles and scopes and see who holds each one.
Sign-in sourcesIdentity Providers, MigrationLet people sign in with Google, Microsoft Entra ID, GitHub, Apple or another OpenID Connect provider, and bring users in from another identity provider.
CredentialsSigning Keys, API SecretsFollow and rotate signing keys, and issue credentials for the Admin API.
Developer toolsProviders, Token Inspector, Wire BenchRead the OpenID Connect contract a realm publishes, decode and verify a token, and run real protocol requests for one of your clients.
ObservabilitySessions, Live Auth Stream, IP Approvals, Push Authenticator, Webhooks, AuditWatch sign-ins as they happen, end sessions, release sign-ins held by address, follow webhook deliveries, and read the access and change trails.

Help inside the console

Press ? or choose Guide in the top bar on any screen. The panel explains the screen you are on — what it is for, what to watch out for and what comes next — next to a guide to the whole system, a glossary of concepts and the keyboard shortcuts. When your plan includes the AI advisor, searching the panel also offers Ask the AI, which answers from the documentation and cites it.

  • Tours highlight a screen’s less obvious controls the first time you open it. You can take one again from the Guide.
  • Guided setup takes a new account from its first realm to a working client using the real forms. You can resume or restart it from the dashboard.
  • Integration guides on each client give code for your stack, already filled in with the client’s values, and mark the last step done when the client receives its first real token.

The AI advisor

When your plan includes it, the AI advisor appears where a second opinion helps. On a client, it reviews the configuration, diagnoses failing sign-ins, proposes settings you can apply and undo, and answers security questionnaires from the real configuration. On the dashboard and in Audit, it reads the activity and answers questions in plain language. In the Guide, it answers from the documentation.

It only proposes: nothing changes until someone with permission applies it, and it reads a realm or client only after you consent for that realm or client. Each run counts towards your plan’s AI runs per month. See Authio AI.

Your settings and the account

ScreenWhat it holds
ProfileYour details, your open sessions and your roles, and the addresses of the account pages your users manage themselves on.
SecurityTwo-factor authentication with an authenticator app for your own console sign-in, recovery codes, the phones that approve your sign-ins and the places you sign in from.
NotificationsConditions affecting the account, such as an expiring secret, a quota near its ceiling or a disabled webhook. The owner also decides which channels deliver them.
TeamWho can reach the console, the role each one holds, and the invitations still open.
SubscriptionThe plan, its quotas and usage, the cost per realm and, for the owner, invoices and payment.

What each role sees

The sidebar lists only the screens your role can read, and a control you cannot use is shown disabled with the reason. Hiding is a convenience, not the protection: the API checks the same permissions on every request.

Account roleSeesChanges
AuditorEvery screen except API Secrets and Migration, including the audit trail, the plan and its usageNothing
DeveloperThe same as an Auditor, plus MigrationRealms, clients, users, roles and scopes, but no secrets and nothing about billing
AdminEverything an Owner sees except invoices, the payment method and the balanceAlso credentials and the team
OwnerEverything, including invoices, the payment method and the balanceAlso the plan, billing and who owns the account

Authio’s own operators also have an Administration section for running the platform; it never appears in a customer’s console. Roles and invitations are covered in Team and access.

On the Dedicated plan

An account on the Dedicated plan keeps its realms, clients and users in an environment of its own, administered from that environment’s own console. The shared console becomes the place to follow and operate the environment, so its sidebar has only two sections: Environment and Account.

  • Signing in lands on Environment instead of the dashboard, and any realm-scoped address sends you back there.
  • The environment page has four tabs: Dashboard (health, resource use, errors and usage at a glance), Services (the API, console, database and cache, each with its latest deployments and controls to restart, redeploy, stop or start it), Monitoring (resources, usage and logs) and Configuration (variables, domain and the danger zone).
  • The realm selector and the Guide button are not shown; the environment page has a guide of its own.
  • G shortcuts jump around the environment instead: E overview, H Dashboard, O Services, M Monitoring, L logs, C Configuration, V variables, D domain and S Settings.
  • Settings, Team and Subscription stay available. The Subscription screen shows the flat price, the renewal date and the environment instead of usage and quotas.

The Dedicated environment section covers provisioning and day-to-day operation in detail.

Next steps