Users and Security Keys
When signed in to the administration panel, you are able to manage users and security keys from this section. The first step is to add a single user by clicking on the check boxes or import users in bulk from Azure AD or a CSV File. In case of adding them one by one, you can assign a security key to the user at the same time.
Add single user
1
At the top left, choose New User -> Add a user to open the wizard below.
Enter the user’s information and click Next.
2
Choose group, and click Next. If no group is selected, the group New User -> Everyone will be chosen by default.
As you can see the image below, you can turn the toggle on if you want to assign a security key now. If you turn the toggle on, you will have 3 options to assign a security key, the first is to choose Smartphone, the second is Contactless Card and the third is FIDO2.0 Hardware Security Key. You can see the specified instructions in related sections.
Smartphone
1
Turn the toggle on and choose Smartphone from the dropdown below as Security Key Device.
From the Smartphone Assignment segment, you can define the security key specifications.
Click the Next button to see the confirmation page.
Note: If administrator clicks on Client PIN, a PIN will be sent to the user's smarphone, and the PIN has to be entered to register the user.
2
By clicking the Confirm button on this page, an email containing an activation link will be sent to the user’s email address.
The user’s status will be changed to Pending waiting for the user to activate their security key.
Contactless Card
1
Choose Contactless Card in Security Key Device if you want to assign a Contactless Card to the user.
Set a name for it. From Choose how to activate dropdown, you can either choose Activate now as an admin if you have the card physically near you or Activate by user if the card is not with you. In case of Activate by user, the targeted user will receive an email containing a link to register the card themself.
2
In case of Active now, simply click the Assign Contactless Card button to see the window Touch your security key, and then tap your card on Reader to register.
Note :In either case, make sure the compatible reader is installed on your PC or end-user’s PC. Download and install rfIDEAS driver from here if you are using rfIDEAS reader.
3
Finally, the image below shows the card is assigned successfully. Click Next and Confirm to complete the assignment. The user will then receive an email containing a PIN for the security key, which at the end of the activation process will be shown to the admin, too.
FIDO2.0 Hardware Security Keys
If you already have a security key and you want to use it as a FIDO2 hardware security key, you must select the third option in the security key device dropdown. If you press the next in this page and confirm your information in the review & submit page, the target user will receive a registration link to set his hardware, as a FIDO2 hardware security key. From now on, the security key can be used for passwordless logins based on FIDO standard wherever it is available.
Import from a CSV File
1
At the top left, click Import users -> Import from a CSV File to open the wizard below.
Then click Select to choose and upload a CSV File from which you want to import users.
Click Next.
2
On this page, you can choose which group you want these users to be added to.
If you do not choose any group, the everyone group will be selected by default.
And then, click Next.
3
When you see the below page, you can click Confirm to add all the users.
Import from Azure AD
1
At the top left, click Import users -> Import from Azure AD to open the wizard below.
Then click Select Group(s) which is placed under Groups in Azure AD, and you can see a list of groups.
You can select as many groups as you want in order to import their users from Azure AD.
2
In this page, you can see the groups that you have selected. You can edit the selected groups by clicking on the pencile icon on the top right of the box. Click on Confirm to add users of the groups that you have choosen.
User Provisioning
For complete information about User Provisioning refer to this link.