Configure Directory (OneIdP)

To create a directory of users, the first step is to configure OneIdP in Scalefusion. To do so,

1. On the Scalefusion Dashboard, navigate to OneIDP > Directory.

2. Click on Get Started.
   

   

3. This will bring up the configuration page. Configuration is a four-step process.
   

4. The steps are explained in detail below

Step 1: Organization Info

Provide your Organization Info:

1. Organization Name: Enter the Organization name.

2. Support Email: Enter your organization’s support email ID.

3. Login Hint: Configure a login hint. This will be displayed to the users while logging in with their OneIdP credentials.

4. Organization Logo: Upload your Organization’s logo. The maximum dimensions should be 300×300px. Only .png, .jpg, .jpeg images are allowed.
   

   By default, the Organization Name, Support Email and Organization Logo are taken from Organization Info on Dashboard. You can replace them.

5. Click Next.
   

   

Step 2: Choose a Domain

1. Select how you want to add your domain. You can select:

   1. Sign in with Google Workspace: Selecting this option will take you to the Google Workspace sign-in page, where you’ll need to log in with your Global Admin credentials. After signing in, select the domain you want to add. Once selected, it will be automatically verified. Please ensure that you sign in using the same domain you wish to add.

   2. Sign in with Microsoft: Selecting this option will take you to Microsoft’s sign-in page, where you’ll need to log in with your Global Admin credentials. After signing in, select the domain you want to add. Once selected, it will be automatically verified.. Please ensure that you sign in using the same domain you wish to add.
      

      

2. Or, you can choose the third option, “Add Domain Manually”.

3. If you select to add the domain manually, there are two types of domains to choose from:

   1. Default domain: This is the default domain provided by Scalefusion. The users will be identified with .oneidp.com as the extension. The domain should be unique and of 4 or more characters.
      

      

   2. Custom Domain: You can optionally add a custom domain that your organization owns to add users ending with your domain.  You would have to verify the domain at the next step using your Domain provider. This is optional, and can be verified later as well.

      1. Users have access to Email: Enable this if the users to be added under custom domain, will have access to their email for authentication.
         

         

      2. Import Domain(s): Clicking this will redirect you to the same pop-up where you can select “Sign in using Google Workspace” or “Sign in using Microsoft” or “Add Domain Manually”.

4. Click Next.

5. You will be asked to verify your domain. Here you can select “Sign in using Google Workspace” or “Sign in using Microsoft” or “verify using a TXT record”.
   

   

Step 3: Verify Domain

This step is based on your selection at Step #2.

If “Sign in using Google Workspace or Microsoft” is selected

When you choose Google Workspace or Microsoft sign-in in Step 2, your domain is verified automatically. If it still shows as Unverified, you can complete verification by signing in again through Google Workspace, Microsoft, or by using a TXT record.

If “Verify using a TXT record” is selected

Default domain

If the Default domain is selected, it will be verified according to basic validations, and you will receive a confirmation screen indicating that the domain is set up. Click Next.

Custom Domain

If you have selected custom domain, you would have to verify the domain ownership using your DNS provider. Hence, you will get a different screen to Verify Domain. The details have to be added to the record with your domain name registrar for verification. After adding, click on Verify Now to verify.

Step 4: Complete Setup

On successful verification of the domain, you will get the Complete Setup screen. This completes the setup and configuration of OneIdP in your Scalefusion account. Click on Finish.

Points to Note:

• One default domain can be created under a directory.

• There can be multiple custom domains.

On clicking Finish, the domains in the directory will be displayed on the Directory main page. Here, 

• Activated Accounts: Displays the count of users who have activated (either reset their password from the invitation email or enrolled at least one device) their accounts.

• Pending Activations: Displays the count of users who have not yet activated their accounts. You can view the list of such users and also send reminders from here. Click on the "Pending Activation" user count, which will bring up a small window with a list of users. Click on Send Reminder to send a reminder for activating the account(s).

This helps to plan a migration for users to SSO powered by OneIdP.

You can also download the report of users who are showing Pending Activation.

1. Click on the number (in blue) showing under the  Pending Activation column.
   

   

2. This will open a pop-up window displaying which users are pending activation. You can then either send reminders to them or download the report.
   

   

   
   

Actions on Directory

The following actions can be performed once a directory is created:

1. Add Users: Adds users in the directory

2. Archive domain: Archiving the domain will not delete the users that have been already added with the domain name, however you won't be able to add new users with this domain.

3. Update Authentication Source: Select this to migrate the authentication source of users to Scalefusion OnPremise connector and let them sign in using their Active directory credentials instead of OneIdP credentials. This is enabled when default Authentication Source in Federated Authentication settings is set to Scalefusion OnPremise

4. Settings

5. Delete Directory: Deletes the directory. If any users have been added with this domain, first they have to be deleted from User Enrollment section. After that, you will be allowed to delete the domain.

6. Migrate users: Users belonging to custom domain can be migrated to OneIdP. This way they don't need to access their email id for authentication while enrolling devices. The authentication will be taken care of by Directory. On clicking the icon, a dialog box will come up to migrate users. Enter the default password with which users can sign in. Alternatively you can choose to generate a random password.
   

   

Other Actions

The following actions can be performed from the Directory page:

1. Edit Organization: The Organization Info can be edited.

2. Add Domain: With this, you can add a new default and/or custom domain.