FusionAuth is a modern platform for Customer Identity and Access Management (CIAM). FusionAuth provides APIs and a responsive web user interface to support login, registration, localized email, multi-factor authentication, reporting and much more.
If you’re looking for employee login or a replacement for Active Directory - you may be in the wrong place. While FusionAuth can be used for nearly any application, we do not offer native desktop integration and replacing Active Directory is not on our roadmap. However, if you’re looking for a solution to manage end users that can perform at scale, then keep reading.
Legacy identity technologies have complex hierarchy and cryptic terminology like realms, principals, subjects and distinguished names. In order to simplify something perceived to be complex, the best approach is to go back to the basics, to the atomic elements and throw everything else away.
When we built FusionAuth we took the back to basics approach. If we had the opportunity to build the next generation of Customer Identity Management from scratch we most certainly would not choose to build it using LDAP or SAML; so, we didn’t.
We identified two atomic elements of identify, Users and Applications. Everyone has Users, and Users need to be authenticated to Applications. For this reason FusionAuth is built upon these two elements; Users and Applications.
A user is uniquely identified in any particular tenant by an email address or username. A User can be registered to one or more FusionAuth Applications. A User Registrations can define one to many Application Roles.
A FusionAuth Application represents an authenticated resource such as a web application, mobile application or any other application that requires authenticated users. A FusionAuth Application is defined by a name and a set of Roles.
First you will need to install and configure FusionAuth before starting your integration. Here are some links to get you started: