RapidIdentity Product Guide

People Settings

The People Settings menu allows administrators to configure global People settings to match organization-specific security policies and standards.

People_Module_-_Main_wSettings.png

The Settings menu is grouped into four interfaces: People Settings, Delegations, Sponsorship Settings, and Sponsorship Attributes.

People Settings

The People Settings - General menu allows administrators the ability to configure global profile features to suit the organization's specific security policies and standards.

To access this menu, click Settings in the People module and click People Settings.

Profiles_Settings.jpg

Choose the settings in the pop-out menu that meet your company's requirements.

People_Settings.jpg
Table 22. Fields

Field Name

Description

Invalid Challenge Set Message

This message appears to users when they have an invalid challenge set. It is recommended to include contact information for your help desk in this message. The most common use of this message is when users are trying to use the Forgot My Password application but do not have a valid set of challenge questions for the application to use.

Enable Challenge Questions

Enables the API for setting challenge questions.

Enable Forgotten Password Retrieval

Enables the API for retrieving passwords by answering challenge questions.

Enable Forgotten Password CAPTCHA

Enables the CAPTCHA system for forgotten password retrieval. A Note About CAPTCHAs

Enable Forgotten Username Retrieval

Enables the API for retrieving usernames by providing the associated email address.

Enable Forgotten Username CAPTCHA

Enables the CAPTCHA system for forgotten username retrieval. A Note About CAPTCHAs

Enable Claim Account CAPTCHA

Enables the CAPTCHA system for the claim account process. A Note About CAPTCHAs

Selecting any of the CAPTCHA options requires administrators to enter a Site and Secret Key, as described in the Google Apps reCAPTCHA API.

Enable Wildcard (*) Searches

Enables the use of searches with a wildcard “*”. These searches may cause extreme load on the RapidIdentity Portal server and the LDAP server. Wildcard searches should only be used in environments with small user bases and with appropriate LDAP indexes.

Show 'Show All' Checkbox In Delegations

Enables a 'Show All' checkbox in each delegation. This option should only be used when delegations only contain upwards of a few thousand users. Extremely large delegations can cause extreme load on the RapidIdentity Portal or LDAP server.

Access Control

Determine the level of Access Control to be assigned to the profile. More information on RBAC and ABAC is available in the Configuration Module Interface Overview.



A Note About CAPTCHAs

RapidIdentity deploys the Google reCAPTCHA CAPTCHA API, and supports v2 of reCAPTCHA. (RapidIdentity also supports v1 of reCAPTCHA, but that has been deprecated by Google.) If any of the CAPTCHA checkboxes are selected, additional fields appear at the bottom of the People Settings right sidebar. Populate these fields to enable this feature.

CAPTCHA_fields.png
Table 23. CAPTCHA Fields

Field

Description

CAPTCHA Provider

Select reCAPTCHA v2 or reCAPTCHA v1.

Note

Google has deprecated reCAPTCHA v1; this setting is not recommended.

reCAPTCHA Secret

Enter the reCAPTCHA secret provided by Google.

reCAPTCHA Site Key

Enter the reCAPTCHA site key provided by Google.



My Team Profiles

The People module's My Team Profiles delegation allows managers and team leaders to view and maintain the access of their team members and direct reports. Managers and team leaders have the following options.

  1. Change Password

  2. Reset Challenge Responses

  3. Enable, Disable, or Unlock an account

  4. Other People Actions as defined by a system administrator

For users that do not have direct reports or team members, the My Team Profiles will not display any team members; consequently, the options described immediately above will not be available.

Users can be viewed in a list or grid and any information available on that user is accessible through by clicking the Details button.

Administrators can configure what information is available, such as Email address, department name, phone number, and the user's photo.

The Profile Actions, described further down on this page, allow users with direct reports to take action on their direct reports. Administrators determine which actions (e.g. Change Password, Disable) a user with direct reports can take.

Select a user and choose an available action from Select Action to apply that action to a user.

Finally, users with direct reports can choose to export their search result to a CSV file by clicking Export results or print their results by clicking Print.

Other Profiles

The Other Profiles delegation allows users with administrative privileges to administer any account visible to RapidIdentity Portal to the level decided by the RapidIdentity Portal Administrator. It's functionality to apply actions to users is identical to the My Team Profiles. Users having access to this delegation can also print or export their results.

Depending on the configuration, users may have the ability to Edit Profile; Change Challenge Responses; Enable; Disable; Unlock. The RapidIdentity Portal Administrator can determine if users can print or export data.

Any delegation can be configured to preload all results by checking the box located in the Details section of each delegation.

To find the desired account to administer, enter the User's Login ID, Last Name, First Name or Email Address into the search back and click Search. If the asterisk (*) is entered into the search bar, upon clicking "enter" or "Search," all users that match the Source Attribute ACL LDAP filter will populate.

Click the Details hover button in the right column to view or edit a user's account as allowed by the current configuration.

Other_Profiles_wDetails-obs.png

The right portion of the Other Profiles delegation displays the selected account demographic information.

Whitepages

The Whitepages delegation allows users to explore the organization directory and obtain predetermined demographic information. Configuration determines whether Whitepages pre-loads all information automatically. If pre-load is not configured to occur automatically, Search Above to See Results displays until a user does a specific or wildcard search.

Users can search the Whitepages by entering any of the attributes displayed (i.e. Last Name, First Name, User ID, etc.) into the Search bar and pressing Enter or clicking Search.

People_-_Whitepages-obs.png

Note

The system does not naturally do partial searches. The wildcard character (asterisk - *) must be used to denote that this is a partial search if desired (e.g., if "student" does not return any results, try student* to return student01, student02, etc., as applicable).

Use a wildcard character by itself to return all possible results.

RapidIdentity Portal Administrators can configure Whitepages to allow users to Change Password, Reset Challenge Questions, and Unlock, Enable or Disable accounts; however, most users will not likely have these action options available.

The Details button provides a right sidebar with information about that user as determined in Settings > Delegations.