Optare v1.0 is now available. Get started →
Configure
Tenant Settings

Tenant Settings

Your tenant is your organization's workspace in Optare. Configure settings to customize authentication behavior.

Accessing Tenant Settings

  1. Log in to Optare Console (opens in a new tab)
  2. Go to Settings → Organization

General Settings

Organization Name

The display name shown to users during authentication.

Acme Corporation

Organization Slug

A unique URL-safe identifier used in login URLs.

acme

Login URL: https://id.optare.one/login?org=acme

Logo

Upload your organization logo. Displayed on:

  • Login page
  • Email templates
  • User consent screens

Requirements:

  • PNG or SVG format
  • Minimum 200x200 pixels
  • Maximum 2MB file size

Authentication Settings

Allowed Authentication Methods

Choose which methods users can use to log in:

MethodDescription
Email/PasswordTraditional login
Magic LinkPasswordless email login
Social LoginsGoogle, GitHub, Microsoft
Enterprise SSOSAML-based SSO
PasskeysWebAuthn/FIDO2

Password Policy

Configure password requirements:

SettingRecommended
Minimum length12 characters
Require uppercaseYes
Require lowercaseYes
Require numberYes
Require special characterNo (optional)

Session Settings

SettingDescriptionDefault
Access Token LifetimeHow long access tokens are valid1 hour
Refresh Token LifetimeHow long users stay logged in30 days
Idle TimeoutLog out after inactivity24 hours

Security Settings

Multi-Factor Authentication (MFA)

OptionDescription
OptionalUsers choose to enable
Required for AdminsAdmins must use MFA
Required for AllAll users must use MFA

Allowed Domains

Restrict signups to specific email domains:

acme.com
subsidiary.acme.com

IP Allowlist

Restrict access to specific IP addresses (Enterprise feature):

203.0.113.0/24
198.51.100.50

Branding Settings

Login Page

Customize the appearance of your login page:

SettingDescription
Primary ColorButtons and links
BackgroundBackground color or image
Logo PositionTop, center, or left
Footer TextCustom text in footer

Email Templates

Customize transactional emails:

  • Welcome email
  • Password reset
  • Magic link
  • Invitation
  • MFA enrollment

Advanced Settings

Webhooks

Receive notifications when events occur:

https://yourapp.com/api/webhooks/optare

Events: user.created, user.login, member.invited, etc.

SCIM Provisioning

Enable automatic user provisioning from identity providers:

  1. Enable SCIM in tenant settings
  2. Copy the SCIM endpoint URL
  3. Configure in your IdP (Okta, Azure AD, etc.)

Audit Logs

View all authentication events:

  • User logins
  • Failed attempts
  • Settings changes
  • Member additions

Logs retained for 90 days (Enterprise: 1 year).

Next Steps

OverviewApplications