Identity Store

The Identity Store provides a feature to manage users and groups registered in an organization.

There are several cases where users or groups are registered in an organization, such as being provisioned through registered applications or being directly registered by administrators. The Identity Store integrates users and groups registered in various ways, allowing them to be searched and providing various management functions for administrators to configure detailed settings for each user or group. Administrators can manage all users and groups registered in the organization through the Identity Store.

Users

Tenant administrators can use the features provided in the user menu to search and modify all users registered in the organization, delete users, or directly register new users.

Additionally, administrators can change a user’s group membership or assign usage permissions to allow users to use applications.

Users are registered in SingleID in the following ways:

• Registered through account synchronization (Inbound Provisioning) from an application
• Registered through Just-In-Time (JIT) provisioning from an Identity Provider
• Registered from an MFA Service Provider
• Manually registered by an administrator Administrators can manage registered users in a unified manner using the user menu.

To access the user menu, go to the following menu:

• Admin Portal > Identity Store > User

User List

You can view and search all users registered in SingleID in a list format.

User Registration

The tenant administrator can register users manually on the screen without going through account synchronization.

To register a user, follow the procedure below.

• Click the Admin Portal > Identity Store > User > Register button

The user can input and register information through a 3-step screen as follows:

1. Profile
2. User Group
3. Summary

Profile

In the profile screen, enter the user’s basic profile information. The fields to be entered are as follows.

Click the Next button to move to the User Group screen.

User Group

In the User Group screen, specify the group to be registered for the user. The entire group that can be assigned to the user is displayed on the left side of the screen. Select the group to be assigned to the user and click the > button to move to the assigned group.

To cancel group assignment, select the group to be canceled in the assigned group and click the < button. Click the Next button to move to the Summary screen.

Summary

1. On the summary screen, confirm the registered information and register the user.
2. If you want to modify the entered information, click the Back button to return to the screen you want to modify.
3. To cancel the registration, click the Cancel button.
4. Clicking the Complete and Add Registration button registers the user and returns to the profile screen to register a new user.
5. Clicking the Complete button registers the user and moves to the detailed information screen of the registered user.

User Modification

To modify a user, follow the procedure below.

1. Click the user you want to modify in Admin Portal > Identity Store > User.
2. Profile, Group, Application, Multi-factor Authentication (MFA) method, Device, Active Session will be displayed.
3. Click the Modify button at the bottom and modify the data you want to change.
4. Click the Save button.

Changing the User’s Status

The status of users managed by SingleID is as follows.

The tenant administrator can change the user’s status according to the user’s current status as follows.

The button to change the user’s status is exposed as follows in the list and detail screens.

• When one or more active or inactive users are selected in the list screen
• When moving to the detail screen of an active or inactive user

Password Reset

The tenant administrator can reset a user’s password. When the tenant administrator resets a user’s password, a guidance email is sent to the user.

Group

The tenant administrator can view the groups to which a user belongs and add or delete group memberships.

To manage a user’s group, click the Group tab on the details screen.

Delete Group

To delete a group assigned to a user, follow these steps:

1. Select the group to be deleted from the list of assigned groups. (Check the checkbox to the left of the group name)
2. Click the < button to delete the assigned group.

Assign Group

To assign a new group to a user, follow these steps:

1. Select the Group to be newly assigned from the list of all groups. (Check the checkbox to the left of the group name)
2. Click the > button to assign the group.

Application

The tenant administrator can view the applications that users can use, add or delete applications. To manage a user’s application, click the Application tab on the detailed screen.

Deleting an Application

To delete an application assigned to a user, follow these steps:

Select the application to be deleted from the assigned application list. (Check the checkbox to the left of the application name) Click the Unassign button displayed above the application list. Click the Confirm button in the confirmation popup.

Application Assignment

To assign a new application to a user, follow these steps:

1. Click the Assign button located at the top right of the application list.
2. In the Application Assignment popup, select the application (check the checkbox to the left of the application name).
3. Click the Assign button.
4. If you have assigned all applications, click the Cancel button to close the popup.

Multi-Factor Authentication (MFA) Method Inquiry and Management

The tenant administrator can view the multi-factor authentication method registered by the user and modify or delete some of the registration information.

To manage a user’s multi-factor authentication (MFA) method, click the Multi-Factor Authentication (MFA) Method tab on the detailed screen.

Modifying Multi-Factor Authentication (MFA) Method

To modify the MFA method registered by the user, follow the procedure below.

1. Click the Modify button at the bottom right of the screen.
2. Click the Registration Information column of the MFA list you want to modify.
3. After modifying the information, click the Save button at the bottom right of the screen.

Deleting Multi-Factor Authentication (MFA) Method

To delete the MFA method registered by the user, follow the procedure below.

1. Click the Modify button at the bottom right of the screen.
2. Click the Delete button to the right of the MFA method you want to delete.
3. Click the Confirm button in the warning popup.
4. Click the Save button at the bottom right of the screen.

Viewing User Device Information

The administrator can view the device information added when the user registers the MFA method.

To view the user’s device information, click the Device tab in the detailed screen.

Active Sessions

When a user logs in to SingleID, SingleID manages the session information of the logged-in user.

The tenant administrator can view the user’s current active session and manage it to force the session to end and log out the user.

To manage a user’s session, click the Active Sessions tab on the detailed screen.

Session Forced Termination

To forcibly terminate a user’s session, follow these steps:

1. Click the Terminate button located at the top right of the session you want to terminate.
2. In the Terminate Confirmation popup, click the Terminate button.

Forcible Termination of Multiple Sessions

If you want to terminate multiple sessions simultaneously, follow these steps:

1. Select the sessions you want to terminate in the list and check the checkbox (V) displayed on the left side of the session information.
2. Click the Terminate button displayed at the top of the list.
3. In the Terminate Confirmation popup, click the Terminate button.

User Deletion

The tenant administrator can delete user information from SingleID.

The delete user button is exposed in both the list and detail screens as follows:

• When one or more users are selected in the list screen

1. After selecting a user, click the Delete button to display a Confirmation popup on the screen.
2. To delete a user, confirm the user’s information and enter the user’s ID, then click the Delete button.
3. When multiple users are selected and the Delete button is clicked, the following Confirmation popup is displayed on the screen.
4. To delete the selected users, use the <, > buttons to confirm all users’ information, enter Delete All, and then click the Delete button.
   Notice

   You must confirm all user information and enter Delete All to activate the delete button.

   If you have moved to the user details screen

   1. If the administrator wants to delete a user, a confirmation popup will be displayed.
   2. To delete a user, check the user’s information, enter the user’s ID, and click the Delete button.

Group

The administrator can use the functions provided in the Group menu to view and modify all groups registered in the organization, delete groups, or register new groups.

You can also change the group membership rules or assign usage permissions to group members so that they can use applications.

Groups are registered in SingleID in the following ways:

• Registered through inbound provisioning from an application (Application)
• Manually registered by the administrator (Create Group) The tenant administrator can manage registered groups in various ways using the group menu.

To access the group menu, move as follows:

• Admin Portal > Identity Store > Group

Group List

The tenant administrator can view and search all groups registered in the organization in a list format.

Create Group

The administrator can manually register a group on the screen without going through inbound provisioning.

1. To manually register a group, click the Register button on the group list screen.
2. When you click the Register button, the group registration popup is displayed on the screen.

The fields that must be entered for group registration are as follows:

3. Complete button is clicked, the group is registered and moves to the detailed information screen of the registered group.

Detailed Information Inquiry and Modification

The administrator can move to the group’s detailed information inquiry screen by clicking the Group in the group list.

If a new group is registered, it will also move to the group’s detailed screen immediately after registration.

At the top of the group detail screen, the group name, description, and management entity information are displayed, and below that, the group information is composed of multiple tabs.

The tenant administrator can confirm the detailed information of the registered group through the Group Profile tab.

To modify the group’s detailed information, follow the procedure below.

1. In the group detail screen, select the Profile tab.
2. Click the Edit button.
3. Modify the Group Information.

The fields that can be modified are as follows.

4. Click the Save button.
5. To return to the inquiry state without saving the modified information, click the Cancel button.

Group Membership Rule Management

The administrator can set rules to automatically configure users who meet certain conditions as group members.

When a group rule is set, the tenant administrator does not need to manually manage members, and the group members are automatically configured and added or deleted according to the set condition.

To manage group membership rules, click the Rules tab on the detailed screen.

To set a group rule, follow the procedure below.

1. Select the Rules tab on the group detailed screen.
2. Click the Edit button.
3. Click the On button for the membership policy setting.
4. Set the condition in the WHEN section.
5. Click the Save button.
6. To return to the inquiry state without saving the set rule, click the Cancel button.

The user’s attributes that can be set in the condition item are as follows.

The operators that can be set in the operator are as follows.

Group Member Management

Tenant administrators can manually specify members of a group or delete users from group members.

To manage group members, click the Members tab on the detail screen.

There are three ways to search for members within the group tab.

• Member status filter
• Keyword search
• Advanced search

Member Deletion

To delete a member from a group, follow these steps.

1. Select one or more members to delete from the member list. (Check the checkbox to the left of the member ID)
2. Click the Delete button displayed at the top of the list.
3. Click the Confirm button in the warning popup.

Member Addition

To add a member to a group, follow these steps.

1. Click the Add button at the top right of the member list.
2. In the member addition popup, select one or more users to add as members. (Check the checkbox to the left of the user ID)
3. Click the Add button.
4. If you have added all the desired users as members, click the Cancel button in the popup to close the member addition popup.

Application Management

The tenant administrator can view the applications assigned to a group and add or delete applications.

To manage a group’s applications, click the Group tab on the detail screen.

Application Deletion

To delete an application assigned to a group, follow these steps.

1. Select the application to be deleted from the list of assigned applications. (Check the checkbox to the left of the application name)
2. Click the Unassign button displayed above the application list.
3. Click the Confirm button in the confirmation popup.

Application Assignment

To assign a new application to a group, follow the procedure below.

1. Click the Assign button displayed at the top right of the application list.
2. In the Application Assignment popup, select the application. (Check the checkbox to the left of the application name)
3. Click the Assign button.
4. If you have assigned all applications, click the Cancel button to close the Application Assignment popup.

Group Deletion

Tenant administrators can delete groups from SingleID.

The group deletion button is exposed as follows in the list and detail screens.

• When one or more groups are selected in the list screen
  1. After selecting the group, click the Delete button to display the following Confirmation Popup on the screen.
  2. To delete the group, confirm the group information and enter the group name, then click the Delete button.
  3. If you select multiple groups and click the Delete button, the following Confirmation Popup will be displayed on the screen.
  4. To delete the selected groups, use the <, > buttons to confirm the information of all groups and enter the phrase Delete All, then click the Delete button.