1. Home
  2. Categories

Categories

  • Announcements regarding our community

    Release
    92
    Topics
    139
    Posts

    danD

    If you go look at https://fusionauth.io/docs/ and scroll to the bottom, you'll see a new section called 'Download docs'.

    Screenshot 2025-05-19 at 9.19.23 AM.png

    This takes you to fusionauth.io/docs/llms-full.txt which is all of our documentation (5MB!) in one file so you can upload it to your favorite LLM and query it.

    Hope you all find it useful.

  • Connect with other community members to discuss CIAM, architecture, app development, and more.

    568
    Topics
    1.9k
    Posts

    mark.robustelliM

    @sergey_smirnov OK, I did some investigating and here is what I have found.

    SSO, I saw a reference to a post that mentions using SSO will create multiple session records (but shouldn't necessarily cause multiple login events). Are you using SSO?

    Are you using any Lambda's? In some versions (notably 1.31.0), a bug caused the OIDC reconcile lambda to be called twice during certain identity provider logins, which could result in duplicate processing and potentially duplicate events. This was patched in version 1.32.1.

    Are you using any Webhooks?

    Are you using an external IdP?

    These are just a couple of things to consider.

  • Share your tips and feedback with FusionAuth and the FusionAuth community.

    86
    Topics
    284
    Posts

    T

    @yuriy-barvenko Ok, I'm in the same boat, but I think it is most likely the database back-end. Reason being, I migrated our database from the docker instance to a stand alone instance of PostgreSQL and I immediately noticed some performance degradation.

    I'm running version 1.55.1 of FusionAuth and PostgreSQL version 14. There are documented performance improvements in both FusionAuth and PostgreSQL. I'll be updating my version of PostgreSQL and will report back.

  • You've got questions? We've got answers.

    1.6k
    Topics
    4.9k
    Posts

    mark.robustelliM

    @joseantonio Ah OK. That makes sense. I couldn't find much detail on how the saml.csrf cookie works. It does seem plausible that when a new window is open that a value could change that could be causing this problem. If it is causing you problems, it may be work opening a new issue.

  • Share and discuss community blog posts.

    169
    Topics
    190
    Posts

  • A read-only knowledge base of questions asked and answered about FusionAuth.

    85
    Topics
    170
    Posts

    W

    Yes—using FusionAuth access tokens to secure partner-facing APIs is a solid approach. The key is ensuring the tokens contain the right claims to enforce proper authorization for your endpoints.

    Separating partners into a different tenant or application can improve security and simplify management. Different tenants fully isolate users and tokens, but would require duplicating application configs. Alternatively, you could keep partners in the same tenant and distinguish them via roles, claims, or separate applications.

    If partners are accessing APIs server-to-server, the client credentials grant (Entities in FusionAuth) is the correct choice. Be sure to carefully scope each partner’s access to avoid over-permissioning.

    More on these topics:

    API Authorization with FusionAuth Tenants Overview JWT Anatomy Authorization Models

  • Connect with people who can help you with FusionAuth projects.

    13
    Topics
    15
    Posts