# Onboard New Users

Onboard a new user, generate keys, and create a Fordefi vault address for them.

Organization backup
Before adding your first end user, make sure you [set an organization backup](/user-guide/backup-and-recover-private-keys) to ensure that your server-side shares are backed up.

There are several steps to onboarding new users:

1. From your **backend**, use the [Create End User](/api/openapi/end-users/create_end_user_api_v1_end_users_post) API call (using a valid [API User](/developers/authentication#create-an-api-user-and-token) access token) to create a new end user. This endpoint takes as input an `external_id`, which you can use as a shared identifier for that user between Fordefi and your system. Once the end user is created, it should also appear also in the end user screen in the web console.
2. From your **backend**, use the [Issue Authorization Token](/api/openapi/authorization-tokens/issue_authorization_token_api_v1_authorization_tokens_post) API call to receive a valid authorization token for the newly created end user. Pass this token to your client side application.
3. From your **client-side application,** initialize the SDK and then call the [`login`](https://documentation.fordefi.com/react-native/functions/login.html) function, passing in the authorization token obtained in the previous step. The first time you call the `login` function for each end user,  it triggers an MPC key generation protocol, that results in the creation of the MPC shares.
4. From your **client-side application**, backup the newly generated end-user MPC shares. The Fordefi SDK supports backing up the shares to the user's personal cloud drive (iCloud or Google Drive) or using a custom encryption key, which you can then store on your backend (though the latter option raises some custody questions.) [Learn more](/waas/end-user-backup-and-recovery).
5. From your **backend**, use the [Create Vault](/api/openapi/vaults/create_vault_api_v1_vaults_post) API to create one ore more vaults for the newly created end user. (For example, you might want to create an EVM vault and a Solana vault.)


The steps are illustrated here:

alt