# Auth

> Built-in auth for your deployed app: sessions, social sign-in, and org membership, managed entirely by PrimDB.

PrimDB provides a built-in auth system for the apps you deploy, so you do not wire up a separate auth provider. It covers user management, sessions, and OAuth social sign-in, with an SDK your app integrates against.

## What it covers

- User management and sessions for your app’s end-users.
- Social sign-in via OAuth providers.
- Organization membership for multi-user apps.
- Managed entirely by PrimDB — no third-party auth accounts to hold.

> **Honest note.** This is auth for the end-users of the app you ship on PrimDB, not for your PrimDB platform login. It is built on Better Auth and exposes an SDK for your app to call.

## Managing app users

The CLI manages the end-users of your deployed app (distinct from PrimDB platform users).

```bash
primdb users                 # list app users (paginated)
primdb users get <email>     # look up a user by email
primdb users suspend <id>    # suspend a user account
primdb users delete <id>     # permanently delete a user
primdb users magic-link <email>  # send a magic-link login email
```

---

Source: https://primdb.com/docs/auth