> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Add users to IDaaS

Anyone who can sign in to IDaaS is a user. The assigned role determines which features the user can access. See [Create, assign, and manage roles](/docs/people-and-access/manage-members/create-assign-and-manage-roles.md) and [Set up your IDaaS account](/docs/get-started/set-up-your-identity-as-a-service-account.md) for more information.

Attention

When a new IDaaS account is created, one user is automatically assigned the Super Administrator role.
The Super Administrator can create additional users and assign roles that control access to IDaaS.
To prevent being locked out of the account, create at least one additional user with the Super Administrator role.

## Before you add users to IDaaS

When you add users manually to your IDaaS account, you do the following:

- [Enter their profile information](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/add-users.md)
- [Assign them to groups](/docs/people-and-access/manage-members/create-and-manage-groups.md)
- [Select access management role items](/docs/applications-and-sso/manage-applications/integrate-oidc-and-oauth-cloud-applications/manage-resource-servers/configure-role-based-access-control-rbac.md)
- [Select their role](/docs/people-and-access/manage-members/create-assign-and-manage-roles.md)
- [Assign custom user attributes](/docs/people-and-access/manage-members/create-and-manage-user-attributes.md), if applicable
- [Assign user authenticators](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/assign-user-authenticators.md)
- [Configure user policies](/docs/people-and-access/manage-user-policies.md) (registration, verification, and Magic Links)
- Optional: [Set up Entrust Identity Verification](/docs/people-and-access/manage-user-policies/set-up-entrust-identity-verification.md) to require Face Biometric verification during onboarding

## How to add users

You can add users to IDaaS using one of the following methods:

- [Add a user manually](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/add-users.md#add-users-manually).
- [Sync a user from a directory](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/add-users.md#synchronize-users-from-a-directory).
- [Import users by synchronizing your IDaaS account with a directory](/docs/directories-and-provisioning/manage-directories/manage-directory-synchronization.md#run-a-force-sync).
- [Bulk import users](/docs/perform-bulk-operations/bulk-import-operations/import-users.md).

## Manage individual users

Once you add a user, you can manage the following from the **User Details** page:

- **Profile.** Update user profile information (see [Edit, delete, unlock, and disable users](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/edit-delete-unlock-and-disable-users.md) and [Add users](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/add-users.md)).
- **Authenticators.** Manage users authenticators (see [Manage authenticators](/docs/authentication-and-security/manage-authenticators.md)).
- **Risk-Based** **Authentication.** Manage risk-based authentication (see [Manage risk-based authenticator settings](/docs/authentication-and-security/manage-authenticators/manage-risk-based-authenticator-settings.md)).
- **Applications.** Manage applications assigned to the user (see [Manage applications](/docs/applications-and-sso/manage-applications.md)).
- **OIDC/OAuth** **Tokens.** Manage OAuth tokens (see [Manage OIDC and OAuth tokens](/docs/applications-and-sso/manage-applications/integrate-oidc-and-oauth-cloud-applications/manage-oidc-and-oauth-tokens.md)).
- **Audits.** View user audit activity and download user audits (see [View and export audit logs](/docs/reports-and-audits/view-and-export-audit-logs.md)).

## Topics in this section

[📄️Add users You can add users in the following ways:](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/add-users.md)

[📄️Unlink from Active Directory You can unlink individual users that are synchronized from a directory. This feature lets administrators remove problem accounts that no longer exist in Active Directory but are still synchronized with IDaaS. When a user is unlinked, the user becomes locally managed in IDaaS.](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/unlink-users-from-active-directory.md)

[📄️View, filter, and export From the Users List page, you can do the following:](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/view-filter-and-export-user-list.md)

[📄️Manage user accounts From the Users List page, you can do the following:](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/edit-delete-unlock-and-disable-users.md)

[📄️Configure Magic Links Magic Links allow unregistered users to bypass the need to enter their username and password to register their authenticators. When a Magic Link is configured for a user, the user receives an email with a Magic Link.](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/configure-magic-link-for-users.md)

[📄️User verification User verification requires a user to provide an administrator with a response from an OTP, grid card, token, or token push authentication. This feature allows administrators to verify the user based on their response to the authentication request.](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/require-user-verification.md)

[📄️Assign authenticators You can assign authenticators to a single user. To assign authenticators to many users at once, see Bulk assign authenticators.](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/assign-user-authenticators.md)

[📄️External IDs Customer Identity and Access Management (CIAM) platforms use directories or external identity providers to identify users with unique IDs, such as UUIDs. End users do not see these IDs, but integrations such as OIDC, SAML, and SCIM rely on them to consistently identify users across customer-managed systems.](/docs/people-and-access/manage-members/add-users-to-identity-as-a-service/configure-external-id-for-users.md)