Identity and accounts
Last updated:
Use these topics to integrate the account lifecycle implemented and verified by the Helium preview.
Important
The contracts and hosted behavior documented here exist in the framework repository, but coordinated consumer packages and the official project template are not yet published. Treat code examples as preview API guidance rather than installation instructions.
Start here
- Register an account — Submit an enumeration-resistant registration request.
- Verify an email address — Consume the opaque verification token delivered by Helium.
- Sign in with a password — Create an ordinary or persistent ASP.NET Core session.
- Read the authenticated account context — Use authoritative request-scoped account state.
Common tasks
- Read and update an account profile
- Sign out and revoke sessions
- Recover and reset a password
- Change the current password
Key concepts
- Authentication sessions
- Lockout and abuse resistance
- Identity lifecycle events
- Identity security considerations
Onboarding
After verification and sign-in, use Onboarding to discover state and create the account's first organization atomically.
Troubleshooting
Identity operations return provider-neutral OperationResult values. Start with Operation results and errors and preserve the returned correlation identifier when collecting diagnostics.
Reference
The supported surface is limited to documented types in Trombetta.SaaS.Contracts.Identity and Trombetta.SaaS.Hosting.AspNetCore. Persistence entities, credentials, tokens, session identifiers, cookie contents, claims construction, and provider implementation types are not public contracts.