Update a User

In most cases, users can manage their own account details, but there are still some tasks that are restricted to administrators. Only Admin users can:

• Reset passwords for other users
• Reset credentials for multi-factor authentication
• Unlock, disable, or remove user accounts
• Delete sessions of other users.

note

If your DAI installation uses single sign-on (SSO), then your DAI users are managed by the software your company uses for network authentication (known as an "identity provider"). When SSO is enabled in DAI, your company's network administrator performs all the tasks on this page in the identity provider. The only task you can still perform in DAI is Disabling user accounts.

See How Does Single Sign-On (SSO) Work in DAI? for more information about the integration.

Search for a User

Before you can update a user account, you need to find the correct details in the Admin Console.

1. Log in to Eggplant DAI with your Admin user account.
2. Go to System > Access. The Access page is displayed.
3. Click Manage users to open the Admin Console on a new browser tab.
4. In the search box, enter part or all of the full name, last name, or email address of the user that you’re interested in. Or click View all users to return the details of all existing users.
5. Select the ID of the correct record to edit the user account.

Reset a Password

If your Eggplant DAI environment has email enabled, users can reset their own passwords using the Forgot password link on login page. However, on sites where email is unavailable, or when a user has forgotten both their username and password, an administrator needs to do this.

For sites where email is unavailable:

1. Follow the steps in Search for a User to find the user account that you’re interested in.
2. Select the Credentials tab of the account.
3. In the Reset Password section, enter and confirm a new password.
4. Leave the Temporary toggle set to ON.
5. Click Reset Password, and then confirm the change.
6. Select the Details tab and make sure that the User Enabled toggle is set to ON.
7. Provide the user with their temporary password.

For when a user with access to email has forgotten their credentials:

1. Follow the steps in Search for a User to find the user account that you’re interested in.
2. On the Details tab of the account, make sure that the User Enabled toggle is set to ON.
3. Select the Credentials tab.
4. In the Credential Reset section, from the Reset Actions list, select Update Password (UPDATE_PASSWORD).
5. In the Expires In boxes, enter a time limit within which the user must reset their password.
6. Click Send Email. The user is sent an email which contains a link to reset their password.
7. If necessary, supply the user with details of their username separately.

Reset Credentials for Multi-Factor Authentication

If a user successfully set up and used multi-factor authentication but is having trouble logging in, an administrator can reset their one-time password (OTP) credentials. The user can then reconfigure their existing password generator app when they next log in. If they can no longer access their OTP generator app, e.g. if they lose their phone, the administrator must disable their OTP credentials. The user can then configure a new password generator app the next time they log in.

Reset OTP Credentials

This feature is only available if you enabled email for Eggplant DAI. For sites without email, follow the instructions in Delete OTP Credentials.

1. Follow the steps in Search for a User to find the user account that you’re interested in.
2. Select the Credentials tab of the account and find the Credential Reset section.
3. From the Reset Actions list, select Configure OTP (CONFIGURE_TOTP) to allow the user to reconfigure their existing app. If you want to set a time limit on when the user must configure their app, enter a value in the Expires In box and select the correct unit from the list below it.
4. Click Send Email to send the user an email that contains a link to the setup screen for multi-factor authentication.

Delete OTP Credentials

Use these instructions when a user can no longer access their one-time password (OTP) generator app, or to reset OTP credentials in environments without access to email. When the user next logs in they are asked to set up a new authenticator app.

1. Follow the steps in Search for a User to find the user account that you’re interested in.
2. Select the Credentials tab of the user account and look at the Manage Credentials table.
3. Next to the otp credentials row, select Delete.
4. Select the Details tab, and from the Required User Actions list, select Configure OTP.
5. Click Save.

Unlock an Account

If a user repeatedly attempts to access their account with the wrong credentials, their account is locked and must be unlocked by an administrator.

To unlock a user account:

1. Follow the steps in Search for a User to find the user account that you’re interested in.
2. In the Details tab, set the User Enabled toggle to ON.
3. Click Save.

Disable an Account

Use these instructions to temporarily disable an account, e.g. when a user is on extended leave. See Remove a User for how to permanently delete a user account.

1. Follow the steps in Search for a User to find the user account that you’re interested in.
2. In the Details tab, set the User Enabled toggle to OFF.
3. Click Save.

Remove a User

Permanently delete an account. For example, when a user leaves the company.

1. Follow steps 1 to 4 in Search for a User to find the user account that you’re interested in.
2. Select Delete next to the correct user record.
3. Click Delete to confirm.

Log Out of a User Session

Administrators can end the sessions of other users. This is particularly useful when you need to:

• Free up licensing slots
• Kill a locked session
• Start application maintenance work.

1. Follow the steps in Search for a User to find the user account that you’re interested in.

2. Select the Sessions tab to see a list of the user’s active sessions.

3. Either select:

   • Logout next to a row to end a specific session
   • Log out all sessions to delete all user sessions.