Deco
decocms

Authentication

Supported auth methods and how to configure them for self-hosting

What’s supported

deco CMS uses Better Auth and supports:

  • Email/password
  • Magic link
  • Social providers (e.g. Google, GitHub)
  • SAML SSO (for enterprise orgs)

Configure auth (self-hosting)

Self-hosted deployments load an auth-config.json file at startup (see your deployment guides for mounting details).

Keep provider secrets out of Git. In production, use Secrets management (Kubernetes Secrets, External Secrets Operator, etc.).

Key environment variables

  • BETTER_AUTH_SECRET (required)
  • BETTER_AUTH_URL / BASE_URL (recommended to set explicitly in production)
Previous
Docker Compose
Deploy deco CMS locally using Docker Compose for testing and development
Next

Found an error or want to improve this page?

Edit this page