User Administration

User Creation

The creation of users in Fenergo SaaS can be facilitated in the following ways:

1. through the Security, User Management area
2. through SSO upon the first sign in by a user
3. through SCIM (System for Cross-Domain Identity Management)

Note, "Authentication" (identity of a user) and "Authorization" (access rights of a user) remain two distinct concepts in Fenergo SaaS. Once a user is created in the system, their entitlements still need to be set up (this can also be managed via SCIM).

Self Service User Management

Clients can manage their own users in the User Managment area. Users with the correct permission set can create, edit and remove users from a tenant. The user administration page allows:

• User creation
• User deletion
• User details updates
• Resend user verification email

Permissions

The current Security User Administrator role will dictate if a user has permission to view the User Management page, there are further permissions required to access the actions available on that page.

• Security Create New User - users with this permission will see an "Add" user button on the User Management page which will allow them to create a new users and add additional information for that user
• Security Edit Users - this will permit editing the details of an existing user, adding additional information or resending verification email.
• Security Remove Users - this will enable a delete icon which will appear on hover on each user row in the user management area. Clicking on the icon will remove the user from this tenant only.

User Management

The User Management page will show more details for each user:

• Username - which is a concatenation of firstname and lastname. Where these have not been added user email will be displayed.

  • The user name is a hyperlink which will redirect to the user details page

• Status of the user,

  • Active - for users that have verified their email
  • Inactive - for users that have not yet verified their email
  • Suspended - for users that have been suspended

• Email - this is the email address of the user

• Sources - this will show where the user has been created from.

  • User Management - indicates they have been created/updated in Fenergo User Management
  • Identity Admin - indicates they have been created by Fenergo Administration
  • SSO - indicates the user is created after logging in using Single Sign On
  • External - indicates that the user has been created by an external system (e.g. SCIM)

• Teams and Access layers - this is a hyperlink which will redirect to the users Team and Access layers

Actions on this page:

• The +Add button will allow the creation of a new user
• The trash icon will appear on row hover and can be clicked on to remove a user, they will be asked to confirm deletion
• Click on user name to access user details
• The user icon will appear on row hover and can be used to suspend or reactivate users
• Link to Teams and Access layers for this user

New User

New users can be added using the "Add" button on the User Management page, this will navigate to a New User page. A firstname, lastname and email address must be added to create a new user. Email address will not be editable once the user has been created. Additional information can also be added. The information will be saved for this user in this tenant only. If a user is added to more than one tenant their additional information will not be shown in the second tenant. Once a user is created, if they are new to Fenergo they will be asked to verify their email. If they have already verified their email they will receive a notification email informing them that they have been added to this tenant. A resend verification email option will be available for unverified users. The verification email is valid for 5 days.

NOTE: Email addresses are not case sensitive. The domain (after@) may be case sensitive depending on email server or the domain’s configuration. This means that Joe.Bloggs@email.com is the same user as joe.bloggs@email.com.

Clicking on a user name from the User Managmeent page will redirect to the User Details page. With the correct permissions (Security Edit Users) an administrator can edit the users details from here. All data points apart from email can be updated. Custom data can be added. The elipses button will show an action button which will allow deletion or cloning or a user from here.

Clone User

Users can be cloned from within a user profile, cloning a user will preserve the saved custom data points but not the values. Firstname, lastname and email address will not persist. This will simplify the process of creating multiple users with the same custom properties.

NOTE: Users created externally cannot be cloned.

Suspend User

Users can be suspended from the user management page, using the icon or from the action menu with the user profile. Suspending a user will prevent them from logging in, they will not be automatically logged out, but will not be able to login for their next session. Suspension is applied per tenant. Once users are reactivated they will once again be able to access the system.

Registration

When a user is created they user will be sent an email inviting the user to register:

Upon clicking the Register button within the email, the user will be navigated to the Registration Portal pre-filled with their email and will ask the user to submit and confirm their desired password. The password must adhere to the following strong password standards:

1. Must contain a minimum of 8 character
2. Must contain at least 1 uppercase character
3. Must contain at least 1 lowercase character
4. Must contain at least 1 number
5. Must contain at least 1 special character

Note that the link from the email to verify the user will expire after 5 days. If this happens, there is an option to resend the verification email in the actions of the user's page.

If a user is already registered they will be sent a notication email informing them that they have been added to a tenant.

Forgot your Password

Should a user have issues remembering their password, the user may select “Forgot your password?” and they will be prompted to submit their email address associated with their Fenergo account to proceed with the password reset process:

After submitting their email address, the user will be notified to check their email for instructions to reset their password:

The user will be sent an email providing instructions to click on the provided link to reset their password:

Audit

The Audit trail is now available to view from the 'User Management' and "User Details" screens. Audit on the User Maangement page will show all users added and removed. Audit in the user details will show details of user creation and all updates made to the user profile.

Given the user has the necessary Permissions and Access Layers, the Audit button will appear on the right-hand side of the User Management configuration screen once they click the 'Edit Teams & Access Layers' button.

* *Refer to the Audit User Guide for more details.* *