Managing local accounts and role assignments - PingFederate - 10.3

PingFederate Server

bundle
pingfederate-103
ft:publication_title
PingFederate Server
Product_Version_ce
PingFederate 10.3
category
Product
pf-103
pingfederate
ContentType_ce

You can create, modify, update, or deactivate accounts in the Administrative Accounts window.

  1. Go to System > Server > Administrative Accounts, and then perform any of the following actions.
    TaskSteps
    Create a local account
    1. On the Administrative Accounts window, click Create User.
    2. On the User Information tab, enter a username and other optional information.
      Note:

      If you want PingFederate to notify the user about password changes via email, you must supply an email address.

    3. On the Password Generation tab, enter a password or click Generate one-time password to generate a random password for the account.
      Note:

      Upon successful authentication, the user will be required to change the password of the account immediately.

    4. On the Summary tab, review your configuration, modify as needed, and then click Done.
    5. On the Administrative Accounts window, select the applicable account type, Auditor or Admin, and one or more administrative roles for an Admin account.
    6. Repeat these steps to create additional accounts.
    Modify user information
    1. On the Administrative Accounts window, select the account by its username.
      Note:

      Applicable only to active accounts.

    2. On the User Information window, update the record, and then click Done.
    3. Repeat these steps to update other accounts.
    Update role assignments
    1. Select a different account type, Auditor or Admin, for one or more accounts.
    2. Select or clear the check boxes that correspond to the three administrative roles, User Admin, Admin, and Crypto Admin for one or more accounts.
      Note:

      Applicable only to the Admin accounts.

    Deactivate or reactive a native
    1. Click Deactivate or Activate under Action.
    2. Repeat this step to deactivate or reactive other accounts.
      Note:

      For traceability and accountability purposes, local accounts cannot be deleted Their records are retained and they can be reactivated if needed.

  2. To keep your configuration, click Save.