This article demonstrates how to create or edit a local user account.
Note that you cannot create synchronized users from the HelloID admin dashboard. Synchronized users must be created in the external directory system itself, and then synced into HelloID. Although it is possible to edit or delete a synchronized user from the HelloID admin dashboard, any such changes are not written into the directory system and will revert in HelloID during the next synchronization. To permanently edit or delete a synchronized user, you must make these changes in the origin directory system itself.
Also see Users - Overview.
To get started, go to Directory > Users.
Create a local user
Select the Create User button in the top right corner.
Enter the user's information on the General tab.
Enter a username for the user to log in.
- First Name
Enter the first name of the user.
- Last Name
Enter the last name of the user.
- Change icon
Upload an image.
This email address is used for sending notifications.
- Phone number
The phone number to be used for two factor authentication.
Enter a password for the user.
Turn on to enable the account. Users cannot log in to disabled accounts.
- Change password at next logon
Check this box to force the user to set a new password the next time they log in.
Select a manager for the user. The manager can request products on behalf of, and receive scheduled reports about, his/her managed users. The manager can also be accessed as a property via double curly brace syntax, where this syntax is available.
- Other Manager
Select an additional manager for the user.
- QR code
Enter, generate or scan a QR Code. The user can use this QR code to login. See Configure end user login via QR code.
Select the Save button to confirm. Then, select the Edit link for the user to configure additional options, including the Groups, Credential Sets, and Attributes tabs.
After the user has been created, you can manage its associated user groups on the Groups tab. Select the Add Groups button to add the user to additional groups. Note that all new users in HelloID are automatically added to groups which are set as default groups.
Credential Sets tab
Manage the user's credential sets on the Credential Sets tab.
View the user's custom attributes on the Attributes tab.
Custom attributes are additional variables that you've added to the user schema. They are determined by IdP mapping sets (and are subsequently available for use by application mapping sets). Their values are calculated whenever the associated IdP's directory is synchronized to HelloID. Custom attributes may additionally be used for Tasks, Self Service products, or elsewhere in HelloID where you can access a user object via double curly brace syntax. They cannot be added, edited, or removed in the HelloID admin dashboard, although certain modifications are possible via the API.
Hidden user attributes
HelloID contains a few hard-coded hidden user attribute fields. These are mappable just like other custom attributes, but aren't displayed anywhere in the HelloID user interface—not even on the user Attributes tab. This is due to privacy laws and similar restrictions. Their values may only be viewed or changed via the API.
Hidden attributes cannot be added or removed from the user schema, even by administrators. They are fixed by the HelloID development team.
Currently, these include:
ECKID(ECK iD: A student identification number for school children in the Netherlands)
The following screenshot demonstrates how these attributes appear in API responses:
When you are finished, select the Save button to commit your changes to the local user account.
Edit a local user
To edit a local user, select the user's Edit link in Directory > Users.
You will then be taken to the same screen described above, in the Create a local user section. When finished, select the Save button to confirm.
Delete a local user
To delete a local user, select the appropriate row in Directory > Users and then select the Delete button.
Confirm by selecting the Delete users button in the confirmation window.
The user will then be deleted.