Manage user policies
Use the Policies > Registration page to configure user policies for registration and verification. You can do the following:
- Set the authenticators automatically created for users.
- Set whether users are automatically assigned passwords.
- Select the authenticators that users can add to their profiles.
- Select the authenticators that users can use or must register in order to authenticate to Identity as a Service.
- Set a Magic Link to enable users to register their authenticators without having to submit their username and password.
- Optionally, you can set allowed redirect URLs. When set, users can be redirected to one of the allowed URLs after completing registration. This is useful for organizations, such as a bank, that want to allow users to be redirected back to them after completing registration.
- Enable user verification to require users to verify against an external SAML or OIDC Identity Provider, or through Entrust Identity Verification using Face Biometrics.
- When user verification is enabled, users must verify using a configured Identity Provider or Entrust Identity Verification before accessing an application.
Topics in this section
Authenticator provisioning
Authenticator provisioning sets the authenticators that are provisioned automatically for users. You can automatically provision the following for users:
User verification
User verification prompts a user to verify their identity before registration or authentication. You can configure verification using external SAML or OIDC Identity Providers, Entrust Identity Verification (Face Biometrics powered by Onfido), or both.
User registration
User registration requires a user to register their authenticators at login.
Identity Verification setup
Entrust Identity Verification uses Face Biometrics to verify user identity during onboarding. When enabled, users complete a government-issued ID scan and a facial recognition check. On successful verification, the user status is set to Verified and a Face Authenticator is automatically created and associated with the user.