Self-hosted installation: create the first organization with the bootstrap token

On a self-hosted installation (not the shared platform), the first organization is created on the sign-in screen with a single-use bootstrap token the installation's operator gives you.

Before you start

• The service address. Passkeys are bound to it: changing it later forces everyone to create new passkeys.
• The identifier (slug): 3 to 63 characters, lowercase letters, digits and hyphens. It cannot be changed later.
• The bootstrap token, received through a secure channel. Never paste it into support tickets, chat or email.

How do I create the organization?

1. On the sign-in page, choose «First time here?» › «Set up organization».
2. In the «First organization» dialog, fill in «Bootstrap token», «Identifier», «Name», «Administrator email» and «Initial password» (15 to 1024 characters).
3. Choose «Create organization and administrator». «Organization created. Sign in with the initial password.» appears.
4. Sign in with the email and password. The console shows «First sign-in.» and asks for the administrator passkey.
5. Create the passkey under «Protect» › «Trusted devices».

Setup works once per installation. If the network fails, repeating exactly the same request is safe.

Afterwards

1. Follow Administrator first steps.
2. Ask the operator to retire the bootstrap token: the «Retire the installation token» card reminds you until then.