> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/getting-started/initial-configuration-checklist.md).

# Initial configuration checklist

With the platform deployed, these steps make it ready for users. Each one has a page in this documentation covering it in detail.

* [ ] Change the super-admin password.
* [ ] Configure the email gateway — *Configuration → Email & SMS*.
* [ ] Configure the SMS gateway if you are using SMS OTP — *Configuration → Email & SMS*.
* [ ] Create your first tenant, if your deployment is multi-tenant.
* [ ] Import users, or connect Active Directory or LDAP — *Users & Groups → Manage Users → Import*.
* [ ] Register your first application — *Manage Resources → Manage Applications*.
* [ ] Enable the authentication methods you intend to use — *Configuration → Authentication Modes*.
* [ ] Set the authentication each application role requires — in the Create Resource wizard, step 3.
* [ ] Configure risk profiles and adaptive authentication, if you are using them — see *Adaptive authentication and risk profiles*.
* [ ] Review the security policies — *Configuration → Security Policies*.
* [ ] Test the end-to-end login flow.
* [ ] Configure audit-log retention — *Configuration → Audit Log Configuration*.
* [ ] Register the licence — *Manage License*.

That is a SECUREpass deployment end to end — two servers, a certificate, a set of firewall rules, and the two checklists that separate a working install from one that is ready for users.

Work through the steps in order. Each depends on the one above it: users cannot be imported before the gateways can deliver their welcome messages, and an application cannot be given an authentication standard before its roles exist.