Skip to content

Organization accounts and members

Vitni separates user sign-in from organization membership. Users authenticate through the deployment’s OIDC identity provider; organization records, roles, and invitations are managed inside Vitni.

  1. Open the Vitni workspace and select Continue with Vitni.
  2. Complete sign-in or registration with the configured identity provider.
  3. In Organizations, enter an organization name and workspace slug, then create it.

The person who creates the organization becomes its owner. Each organization has one issuer profile and its own issuer identity and signing-key lifecycle.

The issuer profile contains the name and public details shown with credentials: description, website, and contact email. Save the profile, then select Publish issuer identity. Issuer publication is required before credential issuance and assigns the organization’s stable canonical identifier. That identifier is permanent, so confirm the organization and deployment’s public base URL before publishing.

Owners and admins can create an invitation for a colleague’s email and choose an available role. Copy the generated invitation link and send it to the colleague. Invitations are single-use, expire after seven days, and can be revoked. The invitee must sign in with the same verified email address.

RoleCurrent use
OwnerFull organization control, including access management.
AdminManage organization members and invitations, and use issuer workflows.
IssuerWork with achievement definitions and issue credentials.
Read onlyView organization information without issuer or access-management actions.

Fine-grained permissions and platform-operator administration are still being completed. Use least privilege when inviting members.

Recipients are not automatically organization members. To add a credential to a holder account, the recipient signs in using the same verified email address that received the claim link.