Skip to content
Autentico

Self-Signup

By default, Autentico operates as a closed system — only admins can create user accounts. Self-signup allows users to register their own accounts from the login page.

Enabling self-signup

Section titled “Enabling self-signup”

Self-signup is controlled by the allow_self_signup runtime setting:

Terminal window
curl -X PUT https://auth.example.com/admin/api/settings \
  -H "Authorization: Bearer $ADMIN_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"allow_self_signup": "true"}'

When enabled, a Create account link appears on the login page, pointing to /oauth2/signup.

Per-client control

Section titled “Per-client control”

Self-signup can be enabled for specific clients only while remaining disabled globally:

{
  "client_name": "Community Forum",
  "allow_self_signup": true
}

The signup page checks the allow_self_signup setting for the originating client. If no per-client override is set, it falls back to the global setting.

Signup flow

Section titled “Signup flow”
  1. User clicks Create account on the login page
  2. User fills in username, password, and (if validation_email_required is true) email
  3. Autentico validates the input against the configured validation rules
  4. If valid: creates the user account and redirects back to the login page
  5. User logs in with their new credentials

Validation rules

Section titled “Validation rules”

The same username and password validation rules apply at signup as at admin-created accounts. See Password Authentication for the validation settings reference.