Skip to main content

Edit, delete, unlock and disable users

From the Users List page, you can do the following:

note

If a user is locked and you also disable the user, the user's state shows as Disabled. If you re-enable the user, the user remains in a locked state until you unlock the user.

Modify a user profile​

You can edit the user profile of users, as follows:

  • Only users with a Super Administrator role can change the role assigned to another account.
  • Super Administrators can only be deleted by other Super Administrators.
  • Super administrators cannot be disabled.
  • Administrators cannot change the Language Preference selected for their Profile information on the Administrator Portal. This feature is disabled. They can, however, modify the Language Preference of end users from this page.
  • You cannot change the State (either Active or Inactive) of an AD-synced user from your IDaaS account. The state of an AD-synced user must be changed from their corporate Active Directory record.
  • A Unique User ID attribute is added once a user has been added to IDaaS. This attribute is used as SAML assertions to identify the users. You cannot modify this attribute.

Edit a user profile​

  1. Click > Members > Users. The Users List page appears.
  2. Click the User ID for the profile you want to edit. The User Profile page appears.
  3. Make the required changes and click Save.

Delete users​

When you delete a user any assigned hardware tokens to be reassigned the list of unassigned tokens. Administrators cannot delete themselves from their account. To delete several users at once, see Delete users in bulk.

  1. Click > Members > Users. The Users List page appears.
  2. For locally managed users, click for the user you want to delete.
  3. Click Delete on the Delete User prompt.

Unlock users​

You can unlock users who have locked their accounts due to too many failed authentication attempts or inactivity.

Unlock a user for too many failed authentication attempts​

Users can lock their account by failing an authentication attempt too many times (see Lockout Count on the General Settings page).

  1. Click > Members > Users. The Users List page appears.
  2. A appears beside users with locked authenticators.
  3. Click Unlock in the Actions column. The Unlock User dialog box appears showing a list of locked authenticators.
  4. Click Confirm on the Unlock User prompt to unlock the locked authenticators.
  5. The disappears and all the user's authenticators are now unlocked.

Unlock a user due to account inactivity​

When user inactivity settings are enabled, users who do not sign in within the set period are locked out. Administrators can grant a one‑time sign‑in during a grace period to allow the user to reactivate the account. See Manage General settings for more information about configuring inactivity settings.

  1. Click > Members > Users. The Users List page appears.
  2. Select the user that needs to be reactivated. The User Profile page appears.
  3. Select Check here to update the time the user is temporarily enabled to allow the user to reactivate their account.
  4. Click Save.

Disable or Enable a user​

To prevent a user from signing in without deleting the account, you can disable the user. To restore access, enable the user again.

Disable a user​

  1. Click > Members > Users. The Users List page appears.
  2. Click next to the user you want to disable. The Disable User dialog box appears.
  3. Click Confirm.

Enable a user​

  1. Click > Members > Users. The Users List page appears.
  2. Click next to the user. The Enable User dialog box appears.
  3. Click Confirm.