User Management

The User Management section allows administrators to create, edit, and manage user accounts in S-Auth.

User List

Navigate to Users to see all registered users.

Features

• Search - Filter users by name, email, or user ID
• Sort - Click column headers to sort
• Pagination - Navigate through large user lists
• Quick Actions - Edit, reset password, or delete from the list

User Information

Field	Description
User ID	Unique identifier (e.g., JD-1234)
Name	First and last name
Email	User's email address
Access Level	admin, user, or suspended
Created	Account creation date
Last Login	Most recent login

Creating a User

1. Click New User button
2. Fill in the required fields:

Field	Required	Description
First Name	Yes	User's first name
Last Name	Yes	User's last name
Email	Yes	Must be unique
Password	Yes	Minimum 8 characters
Access Level	Yes	admin or user

3. Click Create User

The user ID is automatically generated from the user's initials plus a random number (e.g., JD-7392).

Password Requirements

• Minimum 8 characters
• Recommended: Mix of uppercase, lowercase, numbers, symbols

Editing a User

1. Click on a user in the list, or click the Edit action

2. Modify the fields:

   • First Name
   • Last Name
   • Email
   • Access Level

3. Click Save Changes

Note: You cannot change a user's ID or directly edit their password here.

Access Levels

Level	Description	Can Login	Admin Access
admin	Full access	Yes	Yes
user	Normal user	Yes	No
suspended	Account disabled	No	No

Changing Access Level

To suspend a user:

1. Edit the user
2. Change Access Level to Suspended
3. Save changes

The user will immediately lose access to all applications.

Resetting Passwords

When a user forgets their password:

1. Find the user in the list
2. Click Reset Password action
3. A new temporary password is generated
4. Share this password securely with the user
5. User should change it on first login

Generated Password

The temporary password is:

• Randomly generated
• 16 characters long
• Mix of letters, numbers, and symbols
• Displayed once - copy it immediately!

Deleting a User

warning

Deleting a user is permanent and cannot be undone.

1. Find the user in the list
2. Click Delete action
3. Confirm the deletion

What Gets Deleted

• User account
• All active sessions
• All access tokens
• All refresh tokens
• Authorization history

Note: OAuth applications created by this user are NOT deleted.

Bulk Operations

Currently, bulk operations are not supported. Users must be managed individually.

API Access

User management is also available via the Admin API:

# List users
GET /admin/users

# Get user
GET /admin/users/:id

# Create user
POST /admin/users

# Update user
PUT /admin/users/:id

# Delete user
DELETE /admin/users/:id

# Reset password
POST /admin/users/:id/reset-password

See API Reference for full documentation.

Best Practices

1. Use strong initial passwords - Generate secure passwords for new users
2. Regular access reviews - Periodically review who has admin access
3. Suspend, don't delete - Consider suspending inactive users instead of deleting
4. Document admin accounts - Keep track of who has admin access and why