Skip to main content

Create a User

You can create local or LDAP or SSO user accounts.

Creating a New Local or LDAP or SSO User Account

  1. From the Settings page, select User Management, then User Roles and Groups.

    sso.png

  2. Select New, and then select Local User or LDAP User or SSO User from the drop-down menu.

    Depending on your selection the Create New Local User or the Create New LDAP User or Create SSO User page is displayed.

    sso_login.png

  3. Enter the user's information, select a role, and then click Save.

    new_sso.png

    LDAP user information is auto-populated from the client's LDAP account as soon as you start to enter the name, email, or username of the LDAP user.

    usermgmt-newuser.png

    Note

    Usernames are case-sensitive.

    By selecting “Override idle timeout settings...”, an administrator can override the Idle User Timeout value that is set in the Password Policy.

Verifying the New Local or LDAP User

  1. Click the arrow where the current logged-in username is displayed and select Sign Out (from the drop-down menu) to log out of the Administrator account.

    You are returned to the login page.

  2. Use the newly created username and password for the account that you just created.

    You are now logged in as the new user.

    Note

    If you attempt to log in to IPM three times with incorrect login/password credentials, you need to complete a CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) challenge-response test to log in to IPM.

Configuring Single Sign-On (SSO):

Navigate to Settings > User Management and locate the new option labelled "SSO Configuration"

sso_configuration.png

SAML 2.0 provider can be e.g. OKTA provider. In provider one needs to add an application, and provide SSO URL (E.g. “https://[FQDN]/api/sec/samlLogin”) , Audience URI ( “https://[FQDN]/” ) , Application user name as email.

Within the SSO Configuration page, you can input and save the following SSO configuration details:

  • IdP Issuer URI/ID

  • IdP SSO URL

  • IdP Signature Certificate

    sso_config1.png

Note

When utilizing the SSO feature:

There will be no password field present for SSO users during login.

If an SSO user is added and SSO configurations are saved:

  • During login, no password field will be present.

  • Users can log in using their SSO username/email.

    sso_login_user.png

After the user enters the email ID set up in the steps, they will be directed to the login screen of the SSO provider.

login.png

Users can enter their login information on the SSO provider's website. After logging in successfully, the SSO provider sends them back to VW's SAML login page. Then, VW checks the login details. If everything is okay, users are taken to the right page, like the VW dashboard. If users are already logged in, VW checks if they are valid SSO users. If they are, they are directed to the right page, such as the VW dashboard.

If an SSO user is not added:

  • Logging in with an SSO username/email will not be possible.

  • If SSO configurations are not saved and an SSO user is added, the login window will display the option to login using VW username/password.

    normal_vw.png
In this section: