Hanzo IAM CLI

make build TARGET_OS=darwin && make install TARGET_OS=darwin

### Linux

```bash
make build TARGET_OS=linux && make install TARGET_OS=linux

### Configure Your Shell

After installation, add `iam-cli` to your `PATH`:

**For Bash users:**

```bash
echo 'export PATH="/usr/local/bin:$PATH"' >> ~/.bashrc
source ~/.bashrc

**For Zsh users:**

```bash
echo 'export PATH="/usr/local/bin:$PATH"' >> ~/.zshrc
source ~/.zshrc

Verify the installation:

```bash
iam --help

## Configuration

### Hanzo IAM server

You need a Hanzo IAM application for the CLI:

1. **Bootstrap data** — Use the repo’s `init_data.json` and follow [Data initialization](/docs/deployment/data-initialization).
2. **Manual** — Create and configure an application in the Hanzo IAM admin panel.

### CLI Configuration

On first run, the CLI prompts for a `config.yaml` with your Hanzo IAM connection details. Use the repo’s `config.yaml.example` as a template.

**Required configuration fields:**

```yaml
application_name: your-app-name
iam_endpoint: https://your-iam-instance.com
certificate: |
  -----BEGIN CERTIFICATE-----
  Your certificate content here
  -----END CERTIFICATE-----
client_id: your-client-id
client_secret: your-client-secret
organization_name: your-organization
redirect_uri: http://localhost:9000/callback

Your configuration will be securely stored in `~/.iam-cli/config.yaml` (base64 encoded) for subsequent use.

## Usage

### Available Commands

```bash
Usage:
  iam [command]

Available Commands:
  completion  Generate the autocompletion script for the specified shell
  groups      Manage Hanzo IAM permissions
  help        Help about any command
  login       Login to your Hanzo IAM account
  logout      Logout from your Hanzo IAM account
  users       Manage Hanzo IAM users

Flags:
  -d, --debug   verbose logging
  -h, --help    help for iam

### Login

To authenticate with your Hanzo IAM instance:

```bash
iam login

This will open your default browser for OAuth2 authentication.

### Managing Users

```bash
# List users
iam users list

# Create a user
iam users create

# Update a user
iam users update

# Delete a user
iam users delete

### Managing Groups

```bash
# List groups
iam groups list

# Create a group
iam groups create

# Update a group
iam groups update

# Delete a group
iam groups delete

### Logout

To logout from your Hanzo IAM account:

```bash
iam logout

## Development

### Local Development Environment

A Docker Compose environment is provided in the repository for local testing and development:

```bash
docker compose up -d

:::note

Allow a few moments for the Hanzo IAM container to fully initialize. The container will restart multiple times as it sets up the database.

:::

### Development Configuration

Create a `config.yaml` file from the provided `config.yaml.example` template at the repository root with your local development settings.

### Testing the CLI

Test the login functionality with the default development credentials provided in the repository documentation.

**Run directly with Go:**

```bash
go run main.go login

**Or build and install first:**

```bash
make build TARGET_OS=darwin && make install TARGET_OS=darwin  # For macOS
# OR
make build TARGET_OS=linux && make install TARGET_OS=linux    # For Linux

iam login