Introduction
The Users Overview page contains a directory of all users within your organization's HelloID environment.
To get started, go to Directory > Users.
Local vs. synchronized users
HelloID makes a distinction between local users vs. synchronized users. Local users are created and exist solely within HelloID, whereas synchronized users are synced in from an external directory system.
Typically, most of an organization's HelloID user accounts will be synced in from an external directory system, and typically that directory system will also serve as the identity provider (IdP), e.g., Microsoft Active Directory or Google G Suite. Local accounts, on the other hand, can be particularly useful in situations such as:
- Your organization works with outside vendors or contractors who need access to HelloID. You can promote a separation of concerns by giving them local HelloID accounts instead of accounts in your organization's directory system.
- Your organization is small and has no directory system, or an unsupported directory system. In this case, you can leverage the HelloID API to generate and maintain local users and groups based on a simple spreadsheet containing personnel data.
- You want a 'break glass' local administrator account to log into the HelloID admin dashboard when your IdP is down.
The Users Overview
The following information is listed for each user:
- Username
- Source
- Status
- Actions
Username
For local users, their username is the entire value displayed in the Username column (sbilal in this example). For synchronized users, their username is the portion before the @ (SBrady11 in this example). The portion after the @ denotes their origin directory system.
The Email column displays the user's email address and is either entered manually for local users, or synchronized from the origin directory system for synchronized users.
Source
The Source column displays the origin directory system of each user, or indicates if the user is local.
Status
The Status column indicates whether a user is enabled or disabled. Enabled users can log in to HelloID. Disabled users cannot.
Actions
Select the Edit, Reset second factor, or Reset Password links under the Actions column to perform the respective action.
Edit a user
Selecting the Edit link for a given user displays the following four tabs:
- General
- Groups
- Credential Sets
- Attributes
These tabs are identical to those displayed when creating a new local user. See Create or manage a local user for information about them.
Delete a user
To delete a user, select their row and then select the Delete button. See Create or manage a local user for detailed instructions.
Reset a user's second factors
To reset a user's second factors, select their Reset second factor link. See 2FA Management for detailed instructions.
Reset a user's password
You may reset a user's password by selecting the Reset Password link. This option is only available for local users. Users synchronized from an external directory system will not have this option available. Their password should be reset using the origin directory system's password reset mechanism.
Enter the new password in the fields displayed on the new window and select the Reset button to confirm.
