LuxID Console
A self-service LuxID Console (also referred to as the LuxID Console) is on the LuxID roadmap. Today, every operation described in this section is performed by LuxID when you submit a request to LuxID. The pages here document the future self-service surface; in the interim, treat them as the canonical list of fields and information to include in your support requests. Other pages across the developer documentation are written for the post-Console world and refer to "the LuxID Console" as the eventual home for these operations; until then, every such reference resolves to a request you raise with LuxID.
Developers and IT administrators operating a LuxID integration - today via support requests, later self-service. Product owners need only the overview below and Environments for go-live planning.
What is the LuxID Console
The LuxID Console is the planned self-service administration portal for LuxID Partners. It is where Partner administrators will configure Applications, manage client credentials, inspect authentication logs, and control how LuxID presents your service to end users. Until the Console ships, LuxID performs these operations on the Partner's behalf based on requests sent to LuxID.
When live, the Console will be available at https://console.luxid.lu (opens in a new tab).
The Console is not a multi-tenant dashboard. Each Partner organisation sees only its own Applications, Groups, Claim Templates, Subscriptions, and logs. There is no global view across Partners.
Who has access to the Console
Access to the Console is granted as part of the LuxID Partner onboarding process. When your organisation is onboarded as a Partner, LuxID provisions a Console account for your designated administrator(s) using the LuxID Pro enterprise federation - your administrators log in with their existing organisational credentials, not a separate LuxID consumer account.
Roles inside the Console:
| Role | Capabilities |
|---|---|
| Partner Admin | Full access: create and edit Applications, manage credentials, view all logs, invite Members |
| Developer | Read and edit Application configuration, manage redirect URIs, view authentication logs |
| Read Only | View-only access to configuration and logs; cannot make changes |
To request additional Console access for colleagues, contact LuxID or, once the Console ships, use the Members section described below.
For background on how Partner and Application relate in the LuxID ecosystem, see Roles in the ecosystem.
Top-level navigation
Once logged in, the Console top navigation exposes the following sections:
| Section | Purpose |
|---|---|
| Applications | Create and configure your Applications |
| Groups | Define authorisation groups assigned to Subscriptions |
| Claim Templates | Declare the user attributes your Applications request |
| Federations | Configure LuxID Pro enterprise federation links |
| Logs | Authentication, Subscription, and Audit log streams |
| Members | Manage Console access for your team |
Each section is scoped to your Partner. Switching between sections does not affect live authentication flows - changes take effect immediately only when explicitly saved.
Environments
LuxID operates two independent environments:
- Production -
login.luxid.lu- live traffic - UAT -
login-uat.luxid.lu- test and integration
The Console gives access to both. A partner and environment selector at the top of the screen lets you switch context. Applications registered in UAT are not automatically promoted to Production - that step is explicit. See Environments for the full promotion workflow.
What you can do in the Console
The child pages in this section cover each operational task in detail:
- Register an Application - Create an Application under your Partner and retrieve your Client ID and Secret.
- Redirect URIs and domains - Configure and troubleshoot the redirect URI allowlist that protects your callback endpoints.
- Client credentials - View and rotate Client Secrets, and handle SAML signing certificates.
- Environments - Understand the Production / UAT split and how to promote Applications between them.
- Logs and audit trails - Query authentication events, Subscription changes, and configuration audit records.
- Test users and simulation - Create test accounts in UAT and trigger synthetic authentication scenarios.
- Branding configuration - Upload your Application logo, set localised display names, and preview the consent screen.
Before you start
If you are setting up LuxID for the first time, read Configure LuxID for the end-to-end onboarding checklist, and Before you start for the information you will need to have ready before opening the Console.
If you need help or find a configuration option that is locked, contact LuxID. Some Partner-level settings (Sphere assignment, LuxID Pro federation topology) can only be changed by the LuxID operations team.