Is this what you are looking for?: https://fusionauth.io/docs/v1/tech/apis/registrations#create-a-user-and-registration-combined

That API does return a token as of v1.17.0.

It means the user won't be able to login.

Thanks Dan! It all works now.

I totally forgot to add the register the user manually to the FusionAuth application. It is working now, thank you!

Currently, if you aren’t using federated login for your users and want to use FusionAuth’s OAuth system or Login API, you must migrate users over. More about migration here: https://fusionauth.io/docs/v1/tech/tutorials/migrate-users

We are working on supporting external userstores and it should be available soon.

You can experiment in the admin UI using the search field.

You can use the query string DSL or a full JSON query in the search field, if you are running elastic search.

Here's a link to building an ElasticSearch query (in version 6.3): https://www.elastic.co/guide/en/elasticsearch/reference/6.3/query-dsl-query-string-query.html

For example if you have companyName in custom data, the query string would be data.companyName:"Acme Corp."

If you are using the database search, you won't be able to use this kind of querying.

Here's more on the difference between the database search and elasticsearch options for user search: https://fusionauth.io/docs/v1/tech/core-concepts/users#user-search

You can search on the user id. While it doesn't say that in the placeholder, it works.

That is correct. Each user can have one email address, one username, or both. Either of these values can be used to login, and therefore the values are unique within the tenant.

We do have a username field on a registration, but it is not used for login.

There's a github issue open for multiple identities: https://github.com/fusionauth/fusionauth-issues/issues/1

No, but you can flush the index: https://fusionauth.io/docs/v1/tech/apis/users#flush-the-search-engine . From that doc:

This will cause any cached data to be written to disk.

No, a user cannot be moved between tenants in the admin user interface. You could do this via the API with a retrieve and a create in a small program, though.

That message means the user is not registered for the application you’re logging into. If you create a registration for the user you’ll see Authenticated.

More on this here: https://fusionauth.io/community/forum/topic/5/can-you-limit-a-user-s-login-authentication-access-to-applications-within-a-single-tenant/2