Admin Portal

• 1: Dashboard
• 2: Integration
• 3: Identity Store
• 4: Policy
• 5: Terms and Conditions
• 6: Settings
• 7: Monitoring
• 8: Open Source licence

1 - Dashboard

Notifications are a feature that can deliver and share important alerts related to SingleID usage with users.

Administrators can register and manage notifications through the notifications menu. The administrator selects the notification type (normal/urgent) based on the notification content and priority, and when a notification is created, the user can receive the notification before login (urgent) or after login (normal/urgent).

Administrators can register and manage notifications to be delivered to users. There are two types of notifications, presented as follows.

Notification

list

To view the notification list, access the menu as follows.

• Admin Portal > Dashboard > Notifications

Register notification

To register a notification, follow the steps below.

1. Admin Portal > Dashboard > Notifications Click the menu.
2. Register button, when clicked, navigates to the notification registration page.
3. Check the input fields below and select and enter the details.
4. Click the Save button.
5. Check the notifications registered in the list.

Edit notification

To edit the notification, follow the steps below.

1. Click the Admin Portal > Dashboard > Notifications menu.
2. Select the notification that needs editing, and click the Edit button at the bottom of the screen.
3. After editing the field you want to modify, click the Save button.
4. Check the edited notifications in the list.

Delete notification

To delete the notification, follow the steps below.

1. Click the Admin Portal > Dashboard > Notifications menu.
2. Select the notifications you want to delete, and click the Delete button at the top right of the screen.
3. The notification delete popup appears.
4. Click the Confirm button to delete the notification.

Approval request

When you click the approval request menu, the administrator can view and cancel all users’ approval requests.

Approval requests consist of the Approval Request List and Approval Request Queue tabs.

Approval request list

If you click the Approval Request List tab, you can view all approval requests.

There are four types of approval request statuses. You can easily filter and view using the Approval Request, Approved, Rejected, Cancel Submission buttons at the top. If you want an advanced search, you can use the advanced search in the search bar at the top right.

• Approval Request: Shows the status of all approval requests.
• Approval: Shows all approved statuses.
• Rejected: Shows approval request items that have been rejected.
• Submission Cancelled: Shows approval requests where the approval has been cancelled.

The description of the approval request list items is as follows.

View and cancel approval requests

When you click the approval request list, the information for that approval request appears in a popup.

View approval request list

A list of all approval requests is displayed.

To view the details of an approval request, click on the item, and the information will pop up.

Approval request queue

Click the Approval Request Queue tab to view all pending approval requests and delete them using either select all or selective selection. Through detailed search, if the requester has resigned or the approver is absent, the administrator can arbitrarily cancel (delete) the approval request.

Delete approval request

To delete the approval request, follow the steps below.

1. Please check(v) the left selection box in the list.
2. The Delete button is enabled at the top of the list. 2. Click the Delete button.
3. Request Deletion Popup appears. 3. Click the Delete button.
4. The selected approval request in the list has been deleted.

Sign up

Click the Sign Up menu to display the list of sign‑up requests.

Sign-up request

When you click the sign‑up request tab, the list of sign‑up requests appears.

There are four types of approval request statuses. You can easily filter and view using the Approval Request, Approved, Rejected, and Cancel Submission buttons at the top. If you want an advanced search, you can use the advanced search in the search bar at the top right.

• Approval Request: Shows the status of all approval requests.
• Approval: Displays all completed approval statuses.
• Rejection: Shows approval request items that have been rejected.
• Submission Cancel: Shows approval requests where the approval has been canceled.

Sign-up email invitation

An email invitation for account registration is a method where the administrator sends an invitation email to the desired user’s email address, allowing them to sign up. You can send up to 50 invitation emails at a time.

To send an invitation email, follow the steps below.

1. Dashboard > Sign Up > Sign Up Email Invitation Click the tab.
2. Click the Send Invitation Email button at the top right.
3. Send Invitation Email Popup appears.
4. Enter the email address to invite in the email field, and click the Add button.
5. Select the group that will be automatically assigned when a recipient joins the group item. (If not set, the group is unspecified)
6. Click the Invite button at the bottom right of the popup.
7. An invitation email will be sent to the specified email address.

2 - Integration

Integration is a service that configures and manages authentication services and account information for various applications.

In SCP SingleID, we support integration with new applications through customized authentication integration and account provisioning services, as well as a DIY (Do-It-Yourself) feature.

Through the integration menu, it provides integration management functions such as Application, Identity Provider, Authenticator, MFA Service Provider.

Application

The application is a menu for registering and linking various applications to apply SCP SingleID’s authentication service.

The administrator can register or edit a new application through the application list screen, and can sort, search, and delete registered applications.

Application List

The administrator can select a registered application on the application list screen to edit/delete, sort, search, etc., and can navigate to a menu screen where a new application can be registered through registration.

To view the list of applications, access the menu as follows.

• Admin Portal > Integration > Application

Application registration

The administrator can register the application by clicking the Register button on the list screen.

Application registration can be done using two methods: Custom App Integration and Pre-Built App Integration.

To register an application, access the menu as follows.

• Admin Portal > Integration > Application > Register Click the button
• Custom App Integration or Pre-Built App Integration Select tab

Custom App Integration

Custom App Integration registration is the connection menu for authenticating the application you want to integrate and provisioning the account.

We provide three types of connection functions as follows.

When registering an application by linking authentication, you provide and select the type (SAML, OIDC) according to the standard authentication integration method.

When registering an application by linking account provisioning, we provide the standard online API method (SCIM).

To register the application Custom App Integration, follow the steps below.

1. Click the Admin Portal > Integration > Application > Register button
2. Custom App Integration > Web Application(SAML) orWeb Application(OIDC) or Identity Provisioning(SCIM v2.0) Select > Next Click the button
3. Go to detailed settings

You can register an application by entering and configuring the information required for integration through a six-step screen as shown below.

Applications using standard protocols (SAML, OIDC, SCIM) can register information and configure policies and attributes through a screen consisting of the following six steps.

1. General
2. SSO
3. Provisioning
4. Profile
5. Policy
6. allocation

General

Enter the general application information as referenced below.

SSO

On the SSO information entry screen, enter the Single Sign On configuration settings.

Provisioning

The Provisioning menu is an account management feature that can distribute user information to applications for synchronization. SingleID provides global standard API specifications such as SCIM and REST.

On the Provisioning information entry screen, enter the configuration settings for account distribution.

Profile

Enter the configuration information for User/Group for deployment on the profile information input screen.

After entering all items, click the Complete button to complete the basic application settings. When you complete registering a new application, it is added to the application list, and new tabs called Policy, Assignment are created.

Policy

You can configure login policy and access control information for application policy settings.

Allocation

Register information for assigning application users based on users and groups. This menu assigns access permissions by configuring the users and groups that can access the registered application.

To assign a user, follow the steps below.

1. When you click the application, you will be taken to the application’s detail page.
2. Click the Assignment tab and click the User tab > Assign button.
3. User Assignment When the popup appears, select the user to assign, and click the Assign button.
4. In the Assignment tab, the selected user appears in the list.

Pre-Built App Integration

The Pre-Built App Integration menu offers a convenient way to quickly connect and use the desired SaaS application, with necessary settings such as connection information, name, and icon prepared in advance.

To integrate the application using Pre-Built App Integration, refer to the menu path below.

• Admin Portal > Integration > Application > Register > Pre-Built App Integration Click the tab
• Select Application > Next button click
• Go to detailed settings

The Pre-Built App Integration menu, like the Custom App Integration menu, allows you to register an application by entering the required integration information and configuring it through a six-step screen as shown below.

The input items and methods for each step are the same, except for the information that has been predefined and entered for Pre‑Built.

1. [General] {#general-1}
2. [SSO] {#sso-1}
3. [Provisioning] {#provisioning-1}
4. [Profile]{#file-1}
5. [Policy] {#policy-1}
6. [Assignment] {#configuration}

General

Enter the general application information as referenced below.

SSO

Enter the Single Sign On configuration information on the SSO information entry screen.

Provisioning

The Provisioning menu is an account management feature that can distribute user information to applications for synchronization. SingleID provides global standard API specifications such as SCIM and REST.

Enter the configuration settings for account information distribution on the Provisioning information input screen.

Profile

On the profile information entry screen, enter the user/group settings for deployment.

After entering all items, click the Complete button to complete the basic application configuration. When you complete registering a new application, it is added to the application list, and new tabs called Policy, Assignment are created.

Policy

You can configure login policies and access control information for application policy settings.

Allocation Settings

Register information for assigning application users based on users and groups. This menu assigns access permissions by configuring the users and groups that can access the registered application.

To assign a user, follow the steps below.

1. When you click the application, you are taken to its detail page.
2. Click the Assign tab and then click the User tab > Assign button.
3. User Assignment popup appears, select the user to assign, and click the Assign button.
4. The selected user appears in the list on the Assignment tab.

Application modification

When you click an application in the list view, you can edit its settings.

To modify the application, follow the steps below.

1. Click the Admin Portal > Integration > Select Application > Edit button.
2. Click the General, SSO, Provisioning, Policy, Assignment, Aggregation, Permission Items, Rebranding tab to edit the items you want to modify.
3. Click the Save button.

Permission item

The permission items provide synchronization by linking the user roles of the integrated application with SingleID.

Register permission item

To set the permission items, follow the steps below.

1. When you click the application, you are taken to its detail page.
2. Click the Allocation tab and the Permission Items tab > click the Register button.
3. When the Permission item popup appears, you need to register the permission item.
4. Enter Name, Key, Display Name, Content and click Save to register the permission.

Rebranding

A rebranding tab that does not appear during registration in the application is added. Rebranding of the application includes login page rebranding functionality when accessed as a separate application.

The included rebranding features are as follows.

• Favicon: The favicon can be modified in the browser.
• Header logo: The header logo on the login screen can be modified to the logo you desire.
• Key visual image: The key image set by default on the login page can be modified.
• Sign‑up page redirection: Registration can be directed to a separate operational sign‑up page instead of SingleID’s sign‑up page.
• Privacy Policy Redirection: You can register the privacy policy URL that was used in the existing application.
• Terms of Service redirection: You can register the Terms of Service URL previously used in the existing application.

UI

From the list screen, click the application, then in the Rebranding tab, click the Edit button to configure application-specific rebranding settings for the UI.

Change favicon

In the application, you can set a custom favicon to match the characteristics of the enterprise application.

To modify the favicon, follow the steps below.

1. Admin Portal > Integration > Select Application > UI > Edit Click the button.
2. Select custom in the Favicon item.
3. Favicon image (pencil shape) item, then click the favicon image.
4. Upload an icon file or enter the icon image URL.
5. Click the Save button and use the preview screen to confirm that the upload was successful. 6.Korean page Enter the title in Korean.
6. English page Enter the title in English.
7. Once the input is complete, use the preview on the right to confirm that it was entered correctly.
8. Click the Publish button at the lower right corner.

Header logo change

In the application, you can configure separate header logo changes to match the characteristics of the corporate application.

To modify the header logo, follow the steps below.

1. Click the Admin Portal > Integration > Select Application > UI > Edit button.
2. Select Custom in the Header Logo item.
3. You can select and configure a text logo or an image logo.
4. Enter the Korean Redirect URL and the English Redirect URL.
5. If the input is complete, use the preview on the right to confirm that it was entered correctly.
6. Click the Publish button at the lower right.

Key visual change

In the application, you can configure separate key visual changes to match the characteristics of the corporate application.

To edit the key visual, follow the steps below.

1. Admin Portal > Integration > Select Application > UI > Edit Click the button.
2. In the key visual item, select Custom.
3. Click to use a single key visual for all languages or language‑specific key visuals.
4. If the image upload is complete, verify through the right preview that it was entered correctly.
5. Click the Publish button at the lower right corner.

Redirection

From the list screen, click the application, then in the Rebranding tab, click the Edit button to configure application‑specific rebranding settings for the redirect.

Sign up

Sign-up allows you to configure a registration link for each application.

Privacy Policy

The privacy policy can be redirected to the URL link of the privacy policy provided for each application.

Terms of Use

The Terms of Service can be redirected to the privacy policy URL link provided for each application.

Delete application

On the application list screen, select the application, deactivate it, then return to the list screen and you can delete it from the three‑dot menu.

Identity Provider

This is the menu for registering and managing IdPs that provide authentication services and credentials to SCP SingleID. At this point, the SCP SingleID acts as a Service Provider and receives authentication services from the IdP.

Identity Provider list

On the list screen, you can select a registered Identity Provider to edit/delete, sort, search, etc., and you can navigate to a menu screen where you can register a new Identity Provider.

To view the Identity Provider list, you can access the following menu.

• Admin Portal > Integration > Identity Provider

Identity Provider registration

On the Identity Provider list screen, click Register at the top to add a new entry.

To register an Identity Provider, follow the steps below.

1. Admin Portal > Integration > Identity Provider > Register Click the button
2. Custom App Integration > Web Application(SAML) or Web Application(OIDC) Select > Next Click the button
3. Go to detailed settings

You can register an Identity Provider by entering and configuring the required integration information through a three-step screen as follows.

• [General] {#General-2}
• [SSO] {#sso-2}
• [JIT provisioning] {#jit}

General

Enter the general information for the IdP (Identity Provider).

SSO

Enter the Single Sign-On configuration information on the SSO input screen.

When integrating with a Web Application (OIDC)

JIT provisioning

The JIT provisioning feature tab has been added to the Identity Provider. This feature synchronizes the account in real time when a user’s changes occur. You can configure items when the account is synchronized in real time.

After entering all items, click the Complete button to complete the basic application setup.

Modify Identity Provider

On the list screen, you can modify the settings by clicking the Identity Provider.

If you want to modify the Identity Provider, follow the steps below.

1. Click the Admin Portal > Integration > Select Identity Provider > Edit button.
2. Click the General, SSO, Provisioning, Policies, Assignment tab to edit the items.
3. Click the Save button.

Delete Identity Provider

On the Identity Provider list screen, select an Identity Provider, deactivate it, then return to the list screen where you can delete it from the three‑dot menu. To register again, click the Add button.

Authenticator

Configure by integrating the Authenticator provided by SCP SingleID. Password and Email are enabled by default.

The types and functions of Authenticators are as follows.

• Password: The Password Authenticator verifies a password known only to the user to authenticate the user as a knowledge‑based authentication method. * It is the built-in Authenticator used for primary and secondary authentication, and it cannot be deleted or disabled for security reasons.
• Email: An ownership-based authentication method that authenticates the user through an OTP (One-Time Password) delivered to the user’s email account.
• Active Directory: Enter the user password of the linked Active Directory to authenticate.
• Knox Identity: Authenticate by entering the user password of the linked Knox Portal.
• Knox Messenger: Enter the Knox Messenger OTP received via the registered Knox Messenger to authenticate.
• PC SSO Agent: Install SingleID’s PC SSO Agent on a PC to perform integrated authentication (SSO) and unified logout across various web browsers, and to authenticate through PC security checks.
• SingleID Authenticator: SingleID dedicated authentication mobile app that supports biometrics (fingerprint, facial), PIN, mOTP, and TOTP.
• SMS: Enter the SMS OTP received on the registered mobile phone to authenticate.

• Passkey: Mobile Passkey, security key, a convenient authentication method that enables easy login with Windows biometric/PIN code.
• TOTP Authenticator: Enter the TOTP received via the registered authentication app or web extension to authenticate.

Authenticator list

We support all authenticators of the six supported types.

To check the Authenticator, please refer to the following path.

• Admin Portal > Integration > Authenticator

Add Authenticator

On the Authenticator list screen, clicking Register moves to the next screen, switching to a screen where you can add an Authenticator.

To add an Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Each authentication methodselect > Next click the button.
3. Enter the information required for authentication settings.
4. Click the Save button.

Add Active Directory {#Active Directory-add}

Users can authenticate using the connected Active Directory.

To add Active Directory, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select Active Directory > Click the Next button.
3. The General page appears. 3. Please review Authnticator Overview and click the Next button.
4. Settings page appears. 4. Enter the information to register Active Directory as an Authenticator.
5. After entering all information, click the Connection Test button to verify.
6. After checking everything, click the Save button.

Add Knox Identity

Users can authenticate using the connected Nox portal.

To add Knox Identity, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select Knox Identity > Click the Next button.
3. General page appears. 3. Check the Authnticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information to register Knox Identity as an Authenticator.
5. After entering all information, click the Connection Test button to verify.
6. After checking everything, click the Save button.

Add Knox Messenger

Enter the Knox Messenger OTP received via Knox Messenger to authenticate.

To add Knox Messenger, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select Knox Messenger > Click the Next button.
3. General page appears. 3. Check the Authenticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information required to register Knox Identity as an Authenticator.
5. After entering everything, click the Save button.

Add PC SSO Agent

To use SSO across multiple browsers, you can install the PC SSO Agent on the user’s PC.

To add the PC SSO Agent, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add button, click it.
2. Select PC SSO Agent > Click the Next button.
3. General page appears. 3. Check the Authenticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information required to register with the PC SSO Agent.
5. After entering everything, click the Save button.

Add SingleID Authenticator

Authenticate using the SingleID Authenticator mobile app provided by SingleID.

If you want to add the SingleID Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select SingleID Authenticator > Click the Next button.
3. The General page appears. 3. Please review the Authnticator Overview and click the Next button.
4. Policy page appears. Enter the information to register the SingleID Authenticator as an Authenticator.
5. After entering everything, click the Save button.

Add TOTP Authenticator

Enter the TOTP received through the registered authentication app or web extension to authenticate. You can use TOTP authentication methods to support 3rd Party Authenticators such as mobile authentication apps (Google Authenticator, Microsoft Authenticator, etc.) and web browser extensions (Chrome Web Store, Microsoft Edge Add-ons, etc.).

To add the TOTP Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Add Click the button.
2. Select TOTP Authenticator > click the Next button.
3. General page appears. 3. Please review the Authenticator Overview and click the Next button.
4. Policy page appears. 4. Enter the information required to register with the TOTP Authenticator.
5. After entering everything, click the Save button.

Modify Authenticator

On the Authenticator list screen, after selecting an Authenticator and clicking Edit, it switches to the edit screen.

If you want to modify the Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor > Edit button click
2. Edit each item, then click the Edit button to complete the changes.

Delete Authenticator

On the Authenticator list screen, select an Authenticator, disable it, then return to the settings screen, and you can delete it using the delete button in the three‑dot menu. You must exclude the authentication policy settings before disabling; otherwise, the disable cannot be applied.

To delete the Authenticator, follow the steps below.

1. Admin Portal > Integration > Authentictor List > Authenticator right three dots Click.
2. Disable popup click
3. If a warning popup appears, check the applied authentication policy.
4. To manage the lower authentication policy, please click here. Then click to exclude the policy from the authentication settings.
5. Deactivation is completed when the corresponding authentication policy is excluded from the authentication policy information.
6. After deactivation is complete, click the Authenticator and then click the Delete button.

MFA Service Provider

MFA Service Provider provides a service that enhances user convenience by applying biometric and simple authentication technologies along with strengthened authentication methods, meeting the security requirements required by enterprises through multi-factor authentication.

MFA Service Provider List

To view the list of MFA Service Providers, you can access the following menu.

• Admin Portal > Integration > MFA Service Provider

MFA Service Provider registration

To register the MFA Service Provider, follow the steps below.

1. Admin Portal > Integration > MFA Service Provider > Register Click the button
2. ADFS Federated Application or Custom Application or Network Equipment Select > Next Click the button

Through a three-step screen as shown below, you can enter the required information, configure it, and register the MFA Service Provider for integration.

• [General] {#General-3}
• [MFA integration] {#integration}
• [Owner] {#owner}

General

Enter general information for the MFA Service Provider.

MFA integration

Enter MFA integration information.

Owner

Select and register the person in charge of the newly registered MFA Service Provider.

When you click the Complete button, the registration is completed.

MFA Service Provider edit

On the MFA Service Provider list screen, after selecting an Authenticator and clicking Edit, you are taken to a screen where you can make modifications.

To modify the MFA Service Provider, follow the steps below.

1. Admin Portal > Integration > MFA Service Provider > Edit Click the button.
2. Edit each item, then click the Edit button to complete the changes.

Delete MFA Service Provider

After selecting an MFA Service Provider on the MFA Service Provider list screen, deactivate it, return to the list screen, and you can delete it from the three‑dot menu.

To delete the MFA Service Provider, follow the steps below.

1. Click Admin Portal > Integration > MFA Service Provider List > MFA Service Provider right three dots.
2. Delete Click the popup button.
3. If a warning popup appears, check the MFA Service Provider information.
4. Enter the MFA Service Provider name below and click the Delete button.

3 - Identity Store

Identity Store is an integrated directory service that centrally manages user, group, and authentication information, supports both cloud and on-premises environments, enables easy implementation of single sign-on (SSO) and multi-factor authentication (MFA), and automates secure integration between applications and user provisioning.

There are various cases in which users or groups are added to an organization, such as being provisioned through a registered application or being added directly by an administrator.

Identity Store allows integration and retrieval of users and groups registered in various ways, and provides various management features so that administrators can configure detailed settings for each user or group.

Administrators can manage all users and groups registered in the organization through the Identity Store.

User

Administrators can view and edit all users registered in the organization using the functions provided in the User menu, and can delete users or directly register new users.

You can also change a user’s group membership or assign permissions to allow the user to use the application.

Users are registered to SingleID in various ways as follows.

• Register via account synchronization (Inbound Provisioning) from the application
• Register via JIT (Just In Time) provisioning from the Identity Provider
• Register from MFA Service Provider
• Manually registered by administrator

Administrators can use the User menu to manage registered users collectively in various ways.

To access the user menu, navigate as follows.

• Admin Portal > Identity Store > User

User List

You can view and search all users registered in SingleID in a list format.

User registration

Tenant administrators can manually register users directly from the screen without going through account synchronization.

To register a user, follow the steps below.

• Admin Portal > Identity Store > User > Register Click button

Users can enter and register information through a three-step screen as follows.

1. Profile
2. User group
3. Summary

Profile

Enter the user’s basic profile information on the profile screen.

The fields that need to be entered are as follows.

Click the Next button to go to the user group screen.

User group

Specify the group for the user to be registered on the User Group screen. All groups that can be assigned to the user are displayed on the left side of the screen. After selecting the group to assign to the user, click the > button to move to the assigned group.

To cancel a group assignment, select the group to cancel from the assigned groups, then click the < button. Click the Next button to go to the summary screen.

Summary

1. After reviewing the information entered on the summary screen, register the user.
2. If you want to edit the entered information, you can click the Back button to return to the screen you want to edit.
3. To cancel the registration, click the Cancel button.
4. When you click the Complete and Add button, it registers the user and returns to the profile screen so you can continue registering a new user.
5. Clicking the Complete button registers the user and navigates to the registered user’s detail screen.

User edit

If you want to modify a user, follow the steps below.

1. In Admin Portal > Identity Store > User, click the user you want to edit.
2. profiles, groups, applications, multi-factor authentication (MFA) methods, devices, active sessions are displayed.
3. Click the Edit button at the bottom and modify the data you want to change.
4. Click the Save button.

User status change

The status of users managed by SingleID is as follows.

A tenant administrator can change a user’s status based on the user’s current state as follows.

The button that changes the user’s status is displayed on the list and detail screens as follows.

• When one or more users in Active or Inactive state are selected on the list screen
• Active or Inactive state when navigating to the user detail screen

Password reset

The tenant administrator can reset a user’s password. When a tenant administrator resets a user’s password, an informational email is sent to that user.

Group

The tenant administrator can view the groups that a user belongs to as a member and can add or remove group memberships.

To manage a user’s groups, click the Group tab on the detail screen.

Delete group

To delete the group assigned to a user, follow the steps below.

1. Select the group to delete from the assigned group list. 1. (Check the checkbox to the left of the group name)
2. Click the < button to delete the assigned group.

Group assignment

To assign a new group to a user, follow the steps below.

1. Select the group to assign from the entire group list. 1. (Check the checkbox to the left of the group name)
2. > Click the button to assign the group.

Application

The tenant administrator can view applications designated for user use and can add, assign, or delete applications. To manage the user’s application, click the Application tab on the detail screen.

Delete application

To delete an application assigned to a user, follow the steps below.

Select the application to delete from the list of assigned applications. (Check the checkbox to the left of the application name) Click the Unassigned button displayed above the application list. In the confirmation popup, click the Confirm button.

Application allocation

To assign a new application to a user, follow the steps below.

1. Click the Assign button displayed at the top right of the application list.
2. Application Assignment Select the application in the popup. 2. (Check the checkbox to the left of the application name)
3. Click the Assign button.
4. If you have assigned all applications, click the Cancel button to close the popup.

View and Manage Multi-Factor Authentication (MFA) Methods

The tenant administrator can view the multi-factor authentication methods registered by users and can modify or delete parts of the registration information.

To manage a user’s multi-factor authentication (MFA) method, click the Multi-Factor Authentication (MFA) Method tab on the details screen.

Modify multi-factor authentication (MFA) method

To modify the multi-factor authentication (MFA) method registered by the user, follow the steps below.

1. Click the Edit button at the bottom right of the screen.
2. Click the Registration Info column of the MFA list you want to edit.
3. After editing the information, click the Save button at the bottom right of the screen.

Delete multi-factor authentication (MFA) method

To delete the multi-factor authentication (MFA) method registered by the user, follow the steps below.

1. Click the Edit button at the bottom right of the screen.
2. Click the Delete button on the right side of the MFA method you want to remove.
3. Click the Confirm button in the warning popup.
4. Click the Save button at the bottom right of the screen.

View user device information

Administrators can view the device information added when a user registers a multi-factor authentication method.

To view the user’s device information, click the Device tab on the detail screen.

Active session

When a user logs into SingleID, SingleID manages the session information of the logged-in user.

The tenant administrator can view a user’s current active session and forcibly terminate the session to log the user out.

To manage the user’s session, click the Active Session tab on the detail screen.

Force Terminate Session

To forcibly terminate a user’s session, follow the steps below.

1. Click the Terminate button displayed at the top right of the session you want to force close.
2. In the Exit Confirmation popup, click the Exit button.

Force terminate multiple sessions

If you want to select one or more user sessions and terminate them simultaneously, follow the steps below.

1. Select the sessions to forcefully terminate from the list and check the checkbox (V) displayed to the left of the session information.
2. Click the Exit button displayed above the list.
3. Exit Confirmation in the popup, click the Exit button.

Delete user

Tenant administrators can delete user information from SingleID.

The button for deleting a user appears on both the list and detail screens as shown.

• When one or more users are selected on the list screen

1. After selecting a user, click the Delete button, and a confirmation popup appears on the screen.
2. To delete a user, verify the user information, then enter the user’s ID and click the Delete button.
3. After selecting multiple users and clicking the Delete button, a confirmation popup appears on the screen.
4. To delete the selected users, use the <, > button, review all user information, then enter the phrase Delete All and click the Delete button.

Group

Administrators can use the functions provided in the Group menu to view and edit all groups registered in the organization, and can delete groups or register new groups.

You can also modify the group’s membership rules or assign permissions so that group members can use the application.

Groups are registered to SingleID in various ways as follows.

• Register via inbound provisioning from the application (애플리케이션)
• Manually registered by an administrator (그룹 생성)

Tenant administrators can centrally manage registered groups in various ways using the group menu.

To access the group menu, navigate as follows.

• Admin Portal > Identity Store > Group

Group List

Administrators can view and search all groups registered in the organization in a list format.

Create group

Administrators can manually register groups directly on the screen without going through inbound provisioning.

1. To register a group manually, click the Register button on the group list screen.
2. When you click the Register button, the group registration popup is displayed on the screen.

The fields that need to be entered for group registration are as follows.

3. Complete button click registers the group and navigates to the detailed information screen of the registered group.

View and edit detailed information

The administrator can click Group in the group list to navigate to the group’s detailed information view screen.

If you have newly registered a group, you will be taken directly to the group’s detail screen immediately after registration.

At the top of the group detail screen, the group’s name, description, and managing entity information are displayed, and below that, group information organized into multiple tabs is shown.

The tenant administrator can view detailed information of registered groups via the Group Profile tab.

To edit the group’s detailed information, follow the steps below.

1. On the group detail screen, select the Profile tab.
2. Click the Edit button.
3. Edit Group Information.

The fields that can be edited are as follows.

4. Click the Save button.
5. To return to the view state without saving the edited information, click the Cancel button.

Group membership rule management

Administrators can set rules that automatically assign users meeting certain conditions as members of a group.

When you set rules for a group, members are automatically provisioned without the tenant administrator having to manually manage them, and members are added or removed according to the configured condition expression.

To manage the group’s membership rules, click the Rules tab on the detail screen.

To set the group’s rules, follow the steps below.

1. Select the Rules tab on the group detail screen.
2. Click the Edit button.
3. Click the On button in the membership policy settings.
4. Set the condition expression for the WHEN area.
5. Click the Save button.
6. If you want to return to the query state without saving the configured rule, click the Cancel button.

The condition expression in the WHEN clause is constructed as follows.

The user attributes that can be set in the condition item are as follows.

The operators that can be configured in the operator are as follows.

Group member management

Tenant administrators can manually assign members to a group or remove users from the group’s members.

To manage the group’s members, click the Member tab on the details screen.

There are three ways to search for members within the Group tab.

• Filter by member status
• Keyword search
• Advanced Search

Delete member

To remove a member from a group, follow these steps.

1. Select one or more members to delete from the member list. 1. (Check the checkbox to the left of the member ID)
2. Click the Delete button displayed at the top of the list.
3. Click the Confirm button in the warning popup.

Add member

To add a member to a group, follow the steps below.

1. Click the Add button at the top right of the member list.
2. In the member addition popup, select the user to add as a member. 2. (Check the checkbox to the left of the user ID)
3. Click the Add button.
4. If you have added all desired users as members, click the Cancel button on the popup to close the member addition popup.

Application Management

The tenant administrator can view applications assigned to a group and can add or remove applications.

To manage the group’s applications, click the Group tab on the details screen.

Application deletion

To delete an application assigned to a group, follow the steps below.

1. Select the application to delete from the list of assigned applications. 1. (Check the checkbox to the left of the application name.)
2. Click the Unassigned button displayed above the application list.
3. In the confirmation popup, click the Confirm button.

Application assignment

To assign a new application to a group, follow the steps below.

1. Click the Assign button displayed at the top right of the application list.
2. Select the application in the Application Assignment popup. 2. (Check the checkbox next to the left side of the application name)
3. Click the Assign button.
4. If you have assigned all applications, click the Cancel button to close the Application Assignment popup.

Delete Group

The tenant administrator can delete a group from SingleID.

The button for deleting a group is displayed on the list and detail screens as follows.

• When one or more groups are selected on the list screen.
  1. After selecting a group and clicking the Delete button, the following confirmation popup appears on the screen.
  2. To delete a group, verify the group information, then enter the group name and click the Delete button.
  3. After selecting multiple groups and clicking the Delete button, the following confirmation popup appears on the screen.
  4. To delete the selected groups, use the <, > button to view all group information, then enter the phrase Delete All and click the Delete button.

AI agent

AI agents are intelligent services used for various purposes such as internal workflow automation, data analysis, and customer support. Using SingleID(integrated authentication and certification system), control the access and permissions of AI agents registered with a single authentication.

To access the menu, navigate as follows.

• Admin Portal > Identity Store > AI Agent

AI Agent List

The administrator can view and search all registered AI agents in a list format.

Register AI Agent

Administrators can register, modify, or delete AI agents.

1. To register an AI agent, click the Register button on the AI agent list screen.
2. When you click the Register button, the AI agent registration popup appears on the screen.

The fields you need to enter to register an AI agent are as follows.

3. When you click the Complete button, a confirmation popup appears to finalize the AI agent registration.

5. Click the Confirm button to register the AI agent successfully.

View and edit AI agent information

The administrator can click AI agent in the AI agent list to navigate to the AI agent’s detailed information view screen.

If you have newly registered an AI agent, you will be taken directly to the AI agent’s detail screen immediately after registration.

At the top of the AI agent detail screen, the AI agent’s agent ID and agent information are displayed.

To modify the AI agent information, follow the steps below.

1. Select the AI agent you want to edit from the AI agent list screen.
2. Click the Edit button at the lower right corner.
3. Edit AI agent information.

The fields that can be edited are as follows.

4. Click the Save button.
5. To return to the view state without saving the edited information, click the Cancel button.

Delete AI agent

To delete an AI agent, you can delete it by clicking the Delete button on the right side of the AI agent detail screen.

To delete the AI agent, follow the steps below.

1. Select the AI agent you want to edit from the AI agent list screen.
2. Click the Delete button on the right.
3. The AI Agent Deletion popup appears.
4. Enter the name of the AI agent you want to delete, then click the Delete button.
5. Click to complete the deletion.

4 - Policy

Add Dormant User Policy #User Lifecycle Management #Conditional Authentication Policy –>

When logging into SingleID or logging into an application registered with SingleID, various settings such as login methods, authentication sessions, and passwords need to be configured according to the organization’s security policy.

SingleID provides a policy management feature that allows detailed configuration of login and authentication information.
If you have purchased the anomalous behavior detection feature (ADM), you can configure it to analyze a user’s login activity at sign‑in and, when it detects authentication anomalies that differ from the norm, notify the user of a potential security threat.

The policy features provided by SingleID are as follows.

• Login Policy
• Authentication Policy
• Anomaly detection policy
  

By using SingleID’s policy feature, you can configure a secure authentication environment that meets organizational security requirements by specifying detailed login methods based on who is logging in, when, from which environment, and to which application.

Login Policy

The administrator can set detailed policies specifying which authentication methods users can use when logging in with SingleID, and, if necessary, create condition-based authentication policies for users authenticating in specific environments.

Login policies can be configured using the following conditions.

• Which application are you logging into?
• Who is logging in?
• In what environment are you logging in?

To access the login policy menu, navigate as follows.

• Admin Portal > Policy > Login Policy

Default login policy

The Admin Portal automatically creates the following two policies by default.

• Admin Portal Policy: Admin Portal access permission control policy
• Default Policy: User’s default access control policy

The Admin Portal Policy is the login policy applied when attempting to log in to the Admin Portal, and the Default Policy is the login policy applied when attempting to log in to the user portal.

If you have linked an application to SingleID and have not assigned a separate login policy, the Default Policy will be automatically assigned as the default login policy.

Register Login Policy

Login policy sets the login policies for administrators and users. You can configure login policies based on the access environment, application, and situation.

Login policies can be registered through a screen consisting of four steps as follows.

1. General
2. Allocation
3. Initial Redirection
4. Rule

General

Enter the name and description of the login policy on the general screen.

The fields that need to be entered are as follows.

Click the Next button to go to the assignment screen.

allocation

Specify the application to which the login policy will be applied on the assignment screen.

1. Click the Assign button to display the application assignment popup on the screen.
2. In the Application Assignment popup, select one or more applications to assign to the login policy, then click the Assign button.
3. If you have assigned all applications, click the Cancel button to close the Application Assignment popup.

Initial Redirection

Specifies how users access the login screen and the login method on the Initial Redirection screen.

• Redirected to SingleID’s Sign-in page (login page)

• Redirected to the external IdP

  
  

The explanations of the two methods above are as follows.

• If you select Redirected to SingleID’s Sign-in page, the SingleID login page will be displayed to the user attempting to log in.
• If you select Redirected to the external IdP, the user trying to log in will see the login page of the selected Identity Provider.
• After selecting Redirected to the external IdP, you must choose the Identity Provider from the selection list and designate it.
• If you select Redirected to SingleID’s Sign-in page, you can optionally display an additional button at the bottom of the SingleID login screen that allows login via an Identity Provider.
• AND see the following external IdP buttons on the Sign-In page Click the text input field below, select one or more Identity Providers registered in SingleID, and configure them to be displayed on the login screen.

Rule

On the Rules screen, modify or add login rules and set the priority among login rules.

Default Rule configuration

In the rule screen’s login rule list, Default Rule is displayed by default.

Default Rule cannot be deleted and can only be edited. Also, when you add one or more login rules, you cannot set the priority. (It always has the lowest priority.)

To modify the Default Rule, follow the steps below.

1. Click Default Rule in the rule list.
2. Default Rule’s WHEN condition cannot be modified.
3. You can modify the THEN result of Default Rule.

You can select one of the following two options when configuring access permission settings.

• Deny Access
• Allow Access

If you select Deny Access, it will reject login for all users.

When you select Allow Access in the access permission setting, you can configure the user’s login method.

Add rule

To add a login rule, follow the steps below.

1. Click the Register button at the top right of the rule list.
2. Enter the rule’s name and description on the rule registration screen.
3. Refer to the following and enter the rule items.

Access Environment

THEN configuration

THEN Set the login method and procedure in the result area.

In the access permission setting (a), you can select one of the following two options.

• Deny Access
• Allow Access

If you select Deny Access, login for all users will be denied. (The default value for the access permission setting (a) is Deny Access.)

To allow users to log in and configure detailed login methods, select Allow Access.

1. Select the Authenticator to use for login from the first login configuration’s selection list.
2. If you want users to be able to log in with another Authenticator in addition to the selected primary login method, select the checkbox (V) of And allow another factors below: and choose one or more Authenticators to add in the text input box.

Click the Save button to register the login rule and return to the rule list.

Rule priority management

If one or more login rules are added, the administrator can set the priority among the login rules. If a user matches the conditions set in multiple rules, the login method of the rule with the higher priority will be applied.

Follow the steps below to set the priority of login rules.

1. Drag the ≡ area displayed to the left of the rule name in the rule list with the mouse.
2. The priority of login rules is determined by the drag-and-drop location.
3. Rules that appear higher in the list have higher priority.

Policy Status Change

The status of the login policies managed by SingleID is as follows.

The administrator can change the login policy status according to its current state as follows.

Disable policy

To disable an active login policy, follow these steps.

1. Click the policy you want to deactivate in the policy list to navigate to the policy detail screen.
2. Click the Disable button.
3. Confirm popup displays login policy information (number of assigned applications, number of rules included in the login policy); after reviewing it, click the Deactivate button.

Policy activation

To change a login policy from inactive to active, follow these steps.

1. Click the policy you want to activate in the policy list to navigate to the policy detail screen.
2. Click the Activate button to change the login policy status to active.

Delete Policy

Administrators can delete the login policy from SingleID.

To delete the login policy, follow these steps.

1. Click the policy you want to delete in the policy list to navigate to the policy detail screen.
2. If the login policy is enabled, click the Disable button to deactivate the policy.
3. Click the Delete button displayed at the top right of the disabled login policy.
4. A popup screen confirming the deletion of the login policy is displayed.
5. To delete a login policy, first review the policy information, then enter the name of the policy you want to delete and click the Delete button.

Access Simulation

When there are many login policies and the rules they contain, it can be difficult to determine which user is governed by which policy for login methods.

SingleID provides an access simulation feature that allows administrators to quickly verify the login policies and rules applied to users.

Using the access simulation feature, you can select the user and the target application, arbitrarily define the user’s login environment (network, device, browser, OS), and predict in advance which login method the user will experience under various circumstances.

Additionally, if there are review requests from users experiencing login difficulties, you can quickly verify using the access simulation feature and modify the problematic policies or rules.

To use the access simulation feature, click the Access Simulation button located at the top right of the login policy list screen.

To run the access simulation, follow the steps below.

1. Enter the ID of the user to be simulated.
2. Specify the IP of the user to simulate. After selecting Specific IP Address, you can manually enter the IP. Enter the IP in the format 123.123.123.123.
3. Specify the device information of the user to simulate. After selecting Platform, you can choose a device from the selection list.
4. Specify the browser information of the user to be simulated. After selecting Browser, you can choose a browser from the dropdown list.
5. Specify the OS information of the user to simulate. After selecting OS, you can choose the OS from the selection list.
6. Click the Application Selection button to select the application to simulate.
7. In the Application Selection popup, click the radio button to the left of the application name to select the application, then click the Add button.

Authentication Policy

The administrator needs to change detailed authentication settings according to the organization’s security policy.

SingleID classifies and manages detailed authentication settings into the following four policies.

• Session Policy
• Authenticator policy
• MFA Service Provider Policy
• Password Policy

To access the authentication policy menu, navigate as follows.

• Admin Portal > Policy > Authentication Policy

To modify the authentication policy, click the Edit button at the lower right of the authentication policy screen to change the settings, then click the Save button.

Session Policy

To change the session policy, follow the steps below.

1. Click the Edit button at the lower right of the authentication policy screen.
2. In the maximum session limit setting, you set the maximum number of sessions a user can create simultaneously.
3. The minimum value that can be set is 1, and the maximum value is 100. When set to 1, a user can log in only from a single browser at a time and cannot log in simultaneously from multiple PCs or browsers.
4. Set the priority of the session created by the user in the session priority settings. The priority can be selected from the following two options.
   • Old session
   • New session

When you set the maximum session limit to 1 and select Old session, a logged-in user will be blocked from logging in when they attempt a new login from another PC or browser where they are not logged in.

Also, when the maximum session limit setting (Œ) restricts the maximum number of sessions to 1 and New session is selected, if a logged-in user attempts a new login from another PC or browser that is not logged in, the previous browser’s session is forcibly expired and the session logged in from the new PC or browser is maintained.

In the maximum session time setting, set the maximum duration a session can be retained.

The maximum session time can be set to one of the following two options.

• No time limit
• Set time limit

If you set No time limit, a session that has been created will not automatically expire until the user logs out. After setting Set time limit and specifying a time, the session expires when the set time elapses, and the user is automatically logged out. Configure the maximum idle session time for the session in the maximum idle session time setting. If you set the maximum idle session time, the session will expire and the user will be automatically logged out when the user does not make an authentication request for the configured duration.

To save the changed settings, click the Save button at the bottom right of the authentication policy screen.

To avoid saving the changed settings, click the Cancel button at the lower right of the authentication policy screen.

Authenticator policy

To change the Authenticator policy, follow the steps below.

1. Click the Edit button at the lower right of the authentication policy screen.
2. Configure according to each item below.
3. When the setup is complete, click the Save button.

MFA Service Provider Policy

To change the MFA Service Provider policy, follow the steps below.

1. Click the Edit button at the lower right of the authentication policy screen.
2. Refer to the table below and configure each item accordingly.
3. When the configuration is complete, click the Save button.

Password Policy

To change the password policy, follow the steps below.

1. Click the Edit button at the lower right of the authentication policy screen.
2. Refer to the table below and configure each item accordingly.
3. When the configuration is complete, click the Save button.

Sign‑up Policy

To allow user sign‑up, enable the registration policy, which permits registration of users other than those provisioned from the HR system or IdP. Through account synchronization, you can not only register, create, modify, and delete accounts but also provide features to invite users via the login screen or email.

To enable and use the registration policy, follow the steps below.

1. Click Admin Portal > Policy > Sign‑up Policy.
2. Enable Allow user registration.
3. If you enable it, the Policy tab and User Invitation tab will appear.
4. Review the descriptions of the Policy tab and the User Invitation tab below, and configure the policy.
5. Click the Save button when the setup is complete.

Policy

You can set general policies for member registration.

Dormant User Policy

Provides a feature that changes users who have not used the SingleID system for an extended period to a dormant state. Users who have been set to a dormant state can be configured, according to the settings, to be restored either by the user themselves or by an administrator.

To enable and use the dormant user policy, follow these steps.

1. Click Admin Portal > Policy > Human User Policy.
2. Human User Policy Activation Click the toggle button

Additional settings are as shown in the table below.

Approval Policy

The administrator can select an approval system and, depending on the type, set policies for member registration and app access through various approval lines. With diverse approval policies, security policies can be flexibly applied each time they change.

Approval can be performed by distinguishing between the built-in approval system function and the Knox Portal approval system. If integration with another approval system is required, please request it via a 1:1 inquiry.

To check the approval policy, follow the path below.

• Admin Portal > Policy > Approval Policy

Approval Policy List

The administrator can select an approval system and, depending on the type, set policies for member registration and app access using various approval lines. With diverse approval policies, security policies can be flexibly applied each time they change.

Register Approval Policy

When you click the Register button, you can set the approval system, type, approver, notification method, and approval period.

Anomaly Detection Policy

SingleID provides a feature that collects and analyzes user behavior data before and after authentication in real time to determine whether there are abnormal authentication activities, and immediately notifies the user of risk when identified as belonging to an abnormal authentication category.

To access the anomalous behavior detection policy menu, proceed as follows.

• Admin Portal > Policy > Anomalous Activity Detection Policy

User Life Cycle Management

User lifecycle management provides configuration functions for setting default values when a user is created or registers, and for extending the user account’s usage period.

To enable and configure the user lifecycle management function, refer to the following.

Onboarding (subscriber)

Set the phone country code, language, and time zone when creating a user and signing up. To configure, click the Edit button at the bottom right to make changes.

Offboarding (former member)

Users can request an extension of their account usage period, and it can be configured to allow the maximum possible extension.

1. Click the Activate toggle when requesting an extension of the user’s usage period.
2. Enter N days for the maximum extendable period.
3. Click the Change button in the usage period request approval to set the approver.

Conditional Authentication Policy

Conditional authentication policies can set rules to match the environment, settings, and individual circumstances of user accounts.

You can set the following rules.

5 - Terms and Conditions

We provide a feature that lets each company using SingleID manage Privacy Policy, Terms of Service, and other items according to their specific circumstances and characteristics.

You can draft a privacy policy that meets your organization’s requirements and notify users, or for users of SingleID, display the terms of service or usage conditions before use and obtain their consent.

Through the Terms and Conditions menu, you can notify users of the privacy policy, terms of use, usage conditions, etc., and obtain their consent. SingleID provides a default template to make drafting terms and conditions easier.

To access the Terms and Conditions menu, proceed as follows.

• Tenant Admin Portal > Rebranding > Terms and Conditions

The features provided in the Terms and Conditions menu are as follows.

• Terms and Conditions Property Settings
• Version management of terms and conditions
• Issuance of terms and conditions

Terms and Conditions List

The tenant administrator can view the terms and conditions in a list format.

The default template provided by SingleID is as follows.

Terms Type Template

• Privacy
• Terms of Use
• Collection and Use of Personal Information
• Marketing

Condition Type Template

• Are you over age 14?

Cookie Type Template

• Cookie

From the list, click a term or condition to edit its settings and navigate to its detailed screen.

1. In the detail screen of the terms or conditions, select the General Settings tab.
2. Click the Edit button.
3. Title can be edited.
4. You can edit required status. The selectable options are as follows.
   • Required: If these terms or conditions are presented to the user and they do not agree, usage will be restricted, preventing further login.
   • Choice: Whether you agree is up to the user, and even if you do not agree to the terms or conditions, you will not be restricted from logging in.
   • Note: We do not verify consent.
5. You can edit the description of terms or conditions. The description is not shown to users and is used for the administrator’s reference.
6. If you have modified all settings, click the Save button.

To return to the view state without saving the edited information, click the Cancel button.

Terms and Conditions Version Management

Tenant administrators can view and manage the versioned list of terms and conditions. The default version for each term and condition is v1.0.0, and it is registered by default for each template when a tenant is created. To view the version list, click the Version History tab on the detailed screen of the terms or conditions.

Version History

You can view the previous version by clicking the Version item at the top of the privacy policy and terms of use.

Click List to view the history of past publications. Once a version has been published, it cannot be edited.

Add version

If you click the Add button on the Version History tab, you can create a new version of terms and conditions.

If you want to add a version, follow the steps below.

1. Click the Add button in the Version History tab.
2. Click the desired locale to select the writing language.
3. The language you selected indicates the region to be displayed in the privacy policy and terms of service. You need to draft the terms and conditions for each selected language.
4. Enter the title and content for each locale language.
5. Click the Save button and click the List button to return to the list.

After completing the draft, review the written article.

Reissue

Newly created versions are published by setting a reissue date.

To publish a new version, follow the steps below.

1. In the Version History tab, click the Reissue Scheduled Date button.
2. Set the version.
3. Set the reissue date.
4. Enable Reissue Modification. If enabled, the revised terms/conditions will be reissued, and users may need to consent based on the General Settings > Required status as of the terms/conditions modification date.
5. Modification reason, please enter briefly.
6. Click the Publish Settings button to complete the configuration.

6 - Settings

The Settings menu consists of Role Management, which manages the permissions of Admin Portal administrators, Ledger Management, which registers and manages SoT (ledger), and SMS Service, which registers SMS integration information for use in secondary multi-factor authentication.

Role management

Role management can control the permissions of administrators in the Admin Portal. In line with the principle of least privilege, we provide role management to enable administrators to operate with minimal permissions.

Administrators have two roles by default.

• ADMINSTRATOR - a super administrator account with all privileges
• SOT_MANAGER - a director, application system administrator, and an account with app management capabilities

User assignment

To add a user with ADMINISTRATOR privileges, follow the steps below.

1. Select ADMINSTRATOR from the menu, and click the User tab.
2. To add a user, click the Add button.
3. You can search for a user using the user ID, name, email address you wish to add.
4. After searching for a user and selecting, click the Add button to add the user.

Director Management

SingleID can manage and view various SoTs.

default

• It is the primary ledger of SingleID, receiving entries through the Identity Store and MFA Service Provider.
  • Mfa: Mfa is the default SoT of the MFA service provider. * All users created through an MFA Service Provider without a specified User Tag are managed as MFA SoT. * MFA cannot be changed or deleted.
  • SingleID: SingleID is the default SoT. * It is used to manage users and groups created through the Admin Portal. * You cannot change or delete the SingleID.

Application

• It is a ledger that is automatically created by receiving user/group information via inbound provisioning from an external application (SoT).
• You can assign the person in charge of managing the ledger through the PIC tab (up to 50 people).

MFA Service Provider

• When registered as an MFA Service Provider, setting a User tag creates a SoT, and new users who receive secondary authentication from that system are marked with #SoT.
• You can view and manage the ledger received through this MFA Service Provider.
• You can assign the person responsible for managing the ledger through the PIC tab (up to 50 people).

SMS service configuration

Administrators can enable the SMS service using the activation toggle button.

SCP SMS Service Configuration

After activating the SMS service, set the SCP SMS service in the SMS service settings.

To set up and use the SMS service, follow the steps below.

1. SMS Service Activation Click the toggle button to activate the service.
2. Select SCP SMS Service.
3. Click Edit, enter the required values to configure SMS, and save.
   • SCP SMS - SCP SMS Service Endpoint URL, SCP SMS Service App Key
4. To save changes, click the Save button. 4. When you click the Save button, a notification popup appears asking whether to save the changes.
5. When you click the Confirm button, the changes are saved, and when the changes are successfully completed, a toast message appears. 5. When the Cancel button is clicked, the administrator’s registration/modification changes are not updated and it returns to the SMS screen.

Knox SMS Settings

Knox SMS is an SMS service provided by Knox. After enabling the SMS service, select Knox SMS to configure it.

SMS sending test

To set up and use the Knox SMS service, follow the steps below.

1. Select the Knox SMS service.
2. Click Edit to register the sender phone number for configuring the SMS service.
3. To save changes, click the Save button.
4. To verify that the SMS settings are correct, you can enter a phone number for the SMS sending test and click Send to perform the test.
5. When you click the Send button, a popup appears asking whether to send an SMS test to that number. 5. When you click Confirm, an SMS is sent to the entered number and a popup window appears. 5. A toast message appears indicating that an SMS has been sent to the specified number.

BizBuriO SMS Settings

After activating the SMS service, select Bizburio SMS in the Bizburio SMS service settings to configure it.

SMS sending test

To configure and use the BizBuriO SMS service, follow the steps below.

1. Select the BizBuriO SMS service.
2. Click Edit to register the sender phone number for configuring the SMS service.
3. To save changes, click the Save button.
4. To verify that the SMS settings are correct, you can enter a phone number for the SMS sending test and click Send to perform the test.
5. When you click the Send button, a popup appears asking whether to send an SMS test to that number. 5. When you click Confirm, an SMS is sent to the entered number and a popup window appears. 5. A toast message appears indicating that an SMS has been sent to that number.

7 - Monitoring

The Monitoring menu lets you view the login history of all users, MFA history, and administrator audit logs.

Login History

Provides users’ login history through the Monitoring menu. Users can also view their own login history via the User Portal.

MFA History

In the Admin Portal, you can view users’ MFA (multi-factor authentication) history through the Monitoring menu. Users can also view their own MFA history via the User Portal.

Administrator audit log

In the Admin Portal, the monitoring menu records the administrator’s activity history.

8 - Open Source licence

The open source licenses used in the SingleID solution are as follows. For more details, see below.

SingleID_SSO-Agent-Windows

The following sets forth attribution notices for third party software that may be contained in portions of this product. If you have any questions, please contact global.cs@samsung.com

SingleID_ADFS-Adapter

The following sets forth attribution notices for third party software that may be contained in portions of this product. If you have any questions, please contact global.cs@samsung.com