Skip to main content

# User management guide

## Registering a new user​

The system provides two ways to create users. Regardless of the chosen method, new workspaces are created both in BAF and in the OMNI Platform subsystem.

The `title` value of the workspace in OMNI Platform corresponds to the workspace identifier in BAF.

note

The license restriction on the number of profiles applies to the total number of profiles of all system users.

### Method 1. IdP integration​

This method uses data from an external identity provider (IdP). If IdP integration is configured, BAF fully relies on it: creating a new user in the IdP with access to workspaces automatically grants them the corresponding rights within BAF.

Users from the IdP can create new workspaces through the dashboard interface — provided that their role contains the required privileges (e.g., the `SuperAdmin` role).

Newly created workspaces are not initially linked to users. User assignment is performed via roles in the IdP.

For more information about configuring IdP integration, see the “IdP Integration” page.

### Method 2. Built‑in system mechanisms​

The second method uses the built‑in facilities of BAF and is intended for creating users directly within the system (without an external IdP). Along with the user, a workspace is created in which the newly created user automatically receives the `WorkspaceOwner` role.

The following data is required for registration:

- userName — the username. Only Latin letters are allowed, length from 1 to 150 characters inclusive.

- password — the password. Minimum length is 6 characters. It must contain Latin letters in both cases, digits, and at least one special character `!`.

- email — the user's email address. Must comply with the standard email format, length up to 150 characters inclusive.

Registration steps:

1. Navigate to the `setup` folder of the distribution.
2. Run the command: `./cli.sh baf create-user - <userName> <password> <email>`

After successful execution, a user with the specified login (`<userName>`) and password (`<password>`) will be created in BAF.