> AI agents: this is one page from PostHog's docs. Full index of Markdown docs for LLMs: https://posthog.com/llms.txt

# Linking FusionAuth as a source

Canonical URL: https://posthog.com/docs/data-pipelines/sources/fusionauth

> **Cloud region:** This page uses US Cloud hosts. For an EU Cloud project, use `https://eu.posthog.com` instead of `https://us.posthog.com` or `https://app.posthog.com` (app host for links).

## On this page

- [Adding a data source](#adding-a-data-source)
- [Available tables](#available-tables)
- [Sync limitations](#sync-limitations)
- [Configuration](#configuration)
- [Supported tables](#supported-tables)

**Beta release**

This source is currently in **beta**. It works end to end, but you may still hit rough edges. [Let us know](https://us.posthog.com/#panel=support%3Asupport%3Adata_warehouse%3A%3Atrue) if you do.

![](https://res.cloudinary.com/dmukukwp6/image/upload/texture_tan_9608fcca70)

![](https://res.cloudinary.com/dmukukwp6/image/upload/texture_tan_dark_a92b0e022d)

Let AI connect your sources for you

Skip the manual setup — run this in your project and the wizard auto-detects your databases and APIs and connects them to PostHog.

`npx @posthog/wizard warehouse`

![PostHog Wizard hedgehog](https://res.cloudinary.com/dmukukwp6/image/upload/wizard_3f8bb7a240.png)

![](https://res.cloudinary.com/dmukukwp6/image/upload/wizard_3f8bb7a240.png)Let AI connect your sources for you

Enter your FusionAuth instance's base URL and an API key to pull your FusionAuth authentication and identity data – users, audit logs, event logs, and login records – into the PostHog data warehouse.

## Adding a data source

1.  Go to the [sources tab](https://app.posthog.com/data-management/sources) of the data pipeline section in PostHog.
2.  Click **\+ New source** and then click **Link** next to FusionAuth.
3.  Next, gather your FusionAuth credentials:
    -   **Base URL** – your FusionAuth instance URL (e.g. `https://your-instance.fusionauth.io`). Must use HTTPS.
    -   **API key** – create one in the FusionAuth admin UI under **Settings > API Keys**. The key needs read access to the endpoints you want to sync.
4.  Back in PostHog, enter the credentials and click **Next**.
5.  Select the tables you want to sync, set the sync method and frequency, then click **Import**.

Once the syncs are complete, you can start using FusionAuth data in PostHog.

### Required API key permissions

The API key needs read access to the resources you want to sync:

-   `/api/user/search`
-   `/api/system/audit-log/search`
-   `/api/system/event-log/search`
-   `/api/system/login-record/search`

## Available tables

| Table | Description | Sync method |
| --- | --- | --- |
| `Users` | User accounts, including registrations, contact info, and account timestamps | Full refresh |
| `AuditLogs` | Administrative actions taken in the FusionAuth admin UI or API | Incremental |
| `EventLogs` | Internal FusionAuth system events such as errors and informational messages | Incremental |
| `LoginRecords` | Every successful and failed login attempt against a FusionAuth application | Incremental |

**Incremental** tables sync only new or updated records on each run. **Full refresh** tables reload all data on each sync.

## Sync limitations

-   The **Users** table is full refresh only because the FusionAuth search API has no documented server-side timestamp filter. The search result window is also capped at approximately 10,000 rows.
-   **AuditLogs**, **EventLogs**, and **LoginRecords** require [Elasticsearch](https://fusionauth.io/docs/lifecycle/manage-users/search/search) to be configured on your FusionAuth instance.

## Configuration

| Option | Type | Required |
| --- | --- | --- |
| `FusionAuth base URL` | text | Yes |
| `API key` | password | Yes |

## Supported tables

| Table | Description | Sync method | Incremental field | Primary key |
| --- | --- | --- | --- | --- |
| `Users` | Full sync only; the search API's result window is capped at ~10,000 rows. | Full refresh | — | — |
| `AuditLogs` | Administrative actions taken in the FusionAuth admin UI or API, such as user or configuration changes. | Incremental, Full refresh | insertInstant | — |
| `EventLogs` | Internal FusionAuth system events, such as errors and informational/debug messages. | Incremental, Full refresh | insertInstant | — |
| `LoginRecords` | A record of every successful and failed login attempt against a FusionAuth application. | Incremental, Full refresh | instant | — |
| `Applications` | FusionAuth applications that users register for and log in to, with their roles and configuration. | Full refresh | — | — |
| `Tenants` | FusionAuth tenants, the top-level isolation boundary for users, applications and groups. | Full refresh | — | — |
| `Groups` | FusionAuth groups that users can be members of, each granting a set of application roles. | Full refresh | — | — |
| `GroupMembers` | Memberships linking FusionAuth users to groups. | Full refresh | — | — |