HelloID

Before you go any further with HelloID, we strongly recommend that you change the default password for the Administrator account.

The on-premises HelloID Agent comprises three Windows services that you install & run on a server within your organization's network. These services communicate with your HelloID tenant via HTTPS. This lets HelloID execute actions & PowerShell code in your network.

For more information, see Agent. To install Agent:

HelloID relies on content, scripts, and other resources across several domains. For HelloID to work correctly, you must add these domains to your firewall's whitelist.

Roles are containers for Rights, which control what features users can access in HelloID.

By default, the Administrator account does not have all rights—instead, you must create a custom role. To do so:

Directory sync is how you sync users and groups from your organization's directory system into HelloID Users and Groups.

HelloID has pre-packaged support for the following directory systems:

If your directory system is not on this list, you will need to write a custom sync script. See Custom directory sync.

The first step with roles & rights is to create an All Rights role for your Administrator account, which you should have already done. The second step is to assign users and groups to the roles they need, and if necessary, create additional custom roles.

For more information, see Roles & rights.

Portal access rules are a powerful tool to control access to HelloID and increase security. At minimum, we recommend adding a rule that enforces 2FA on all users. To do so, Add a portal access rule and configure the Two-Factor tab.

Additionally, review your Sign-on policies and customize them if needed.

If you are using Active Directory as your user directory and you already set up AD directory sync, an IdP was already created for you, to let users log into HelloID via AD. However, if you are using Azure, Google, or a custom directory system, you will need to manually add an IdP. To do so, Add an IdP.

HelloID's audit logs store long-term records about activity in your HelloID portal.

Before you can start viewing reports, you'll need to Grant access to audit logs.

We recommend making an initial pass through each Settings page, to initially configure them.

By default, your organization can access its HelloID instance at a URL like: https://companyname.helloid.com. If you want to use a custom URL instead, follow the below instructions.

Prerequisites

1. Go to Company settings.

2. Go to the Custom Domains tab.

   

3. Enter your custom domain in the Enter Domain field, in the format login.companyname.com or helloid.companyname.com.

4. Enable the Risk toggle.

   Important

   The Risk toggle indicates that you understand the certificate will not be installed until the time listed at the end of this article. Your custom domain may not be accessible in the interim.

5. Click Add.

   

6. You receive a CNAME record for your domain. Add it to your domain's DNS records.

   

7. Click Validate DNS.

8. After successful validation, upload your Certificate and enter its Password. Click Upload.

   

   Note

   You will receive Certificate expiration notifications for this certificate.

Your custom domain is saved.

The certificate will be automatically installed at the following time:

• WE server: the next Monday at 21:00 CET/CEST

• WUS server:

There are two places where you can specify a custom 'from' address for emails sent by HelloID:

These 'from' fields will accept any email address using the helloid.com domain without additional configuration. However, if you want to specify a custom 'from' address (e.g., using your organization's domain), you must follow the directions below.

If you haven't specified any custom 'from' domains, all emails are sent by default from the Service Desk Email Address specified in Company settings.

The mail provider that HelloID uses to send emails depends on where your HelloID instance is hosted. Different providers are used by region due to privacy laws & regulations.

Incidents in your HelloID environment are reported on the admin dashboard. These are high-priority errors and events in HelloID which need your attention. They are tagged according to which HelloID module generated them (Access Management, Service Automation, or Provisioning).

We suggest setting up email and/or webhook notifications, so you don't miss incidents when they are generated. To do so, Set up email notifications for incidents and/or Set up webhook notifications for incidents.

Your HelloID environment is now prepared. All that is left is to get started! Consider starting with:

Many resources are available to help you, including: