Get Started

Introduction Comparison Installation Quickstart

Concepts

Overview Tenants and identities Resources and catalog Server API Typed client CLI Data and consistency

Adapters and plugins Email and SMS Rate limits and lockouts TypeScript Error handling

Authentication

Authentication Sign-in methods Email and password Magic links and codes Passkeys Multi-factor authentication Sessions Tokens and JWTs API keys and service accounts Verification and recovery Tenant authentication policy Impersonation HTTP and configuration

Authorization

Authorization How decisions work Permission catalog Roles and bindings Policy documents Conditions Relationships Batches and reverse queries Data filteringnew Access reviews Separation of duties Temporary access Testing policies

Databases

Databases PostgreSQL SQLite libSQL and Turso Migrations Schema Storage operations

Integrations

Full stack

Nuxt SvelteKit React Router

Backend

Express Hono Fastify NestJS Node.js and custom servers

Client

Features

Organizations

Teams and departmentsnew Onboardingnew Feature flagsnew Guestsnew Licensesnew Billing and spendnew API quotasnew

Access

Security clearancesnew

Security

SSH accessnew Device posturenew Threat detectionnew

AI agents

AI agentsnew Model access and budgetsnew MCP servers Agent-to-agent (A2A)

Federation

Federation Enterprise onboarding

Sign-in

OAuth and OIDC sign-in SAML

Provide identity

OAuth/OIDC provider Resource servers and tokens Token exchange Device authorization Dynamic client registration Dynamic registration and MCP Verifiable credentialsnew

Security events

Shared Signals Shared Signals receivernew

Provisioning

SCIM inbound SCIM outbound

Directory

LDAP gatewaynew

Guides

Build

Build a multi-tenant B2B SaaS SAML single sign-on with Okta SCIM provisioning with Entra ID and Okta Protect an API with OAuth Secure an MCP server AI agents that act for users

Access and compliance

Row-level data filtering Just-in-time admin access Audit readiness for SOC 2 Usage-based billing

Extend and test

Create your first extension Write a database adapter Test your integration

Production

Production checklist Optimize performance Run in multiple regions

Migrate and upgrade

Cookbook

Operations

Scheduled jobs Observability Security model

AI Resources

Use the docs with AI llms.txt Docs MCP server Agent skills Prompts and AGENTS.md

Reference

Reference Options

Package exports Types CLI Error codes Glossary Packages Frequently asked questions Contributing Changelog

Policy playground

Created by Sean Filimon

v0.3.1·Use with AI

Frequently asked questions

Short, plain answers to common questions about adopting, running, migrating to, and upgrading Better IAM, its databases, AI support, and these docs.

README.md package.json edge.ts options.ts identities.ts index.mdx migrations.mdx index.mdx

What it is

Using these docs

Running it

Migrating and upgrading

Adopting it

AI

Contributing

Was this page helpful?

Better IAM is created by Sean Filimon

Last updated November 7, 2026

Packages

The publishable Better IAM packages with their subpath exports, runtime dependencies, and peer dependencies.

Contributing

Set up the Better IAM repository, find your way around the pnpm workspace, run the build, tests, and conformance checks, and regenerate the docs.

On this page

What it is Using these docs Running it Migrating and upgrading Adopting it AI Contributing

Edit this page Report an issue