Configure Directory (OneIdP)

To create a directory of users, the first step is to configure OneIdP in Scalefusion. To do so,

1. On Scalefusion Dashboard, navigate to OneIDP > Directory
2. Click on Get Started
3. This will bring up the configuration page. Configuration is a four-step process
    
4. The steps are explained in detail below

Step 1: Organization Info

Provide your Organization Info with following details:

1. Organization Name: Enter the Organization name
2. Support Email: Enter support email id
3. Login Hint: Configure a login hint. This will be displayed to the users when logging in with their OneIdP credentials
4. Organization Logo: Upload Organization logo. The maximum dimensions should be 300*300. Only .png, .jpg, .jpeg images are allowed
   
   By default The Organization Name, Support Email and Organization Logo are taken from Organization Info on Dashboard. You can replace them.
5. Click Next
   

Step 2: Choose a Domain

1. Choose a domain for the directory. There are two types of domains to choose from:
   1. Default domain: This is the default domain provided by Scalefusion. The users will be identified with .oneidp.com as the extension. The domain should be unique and of 4 or more characters.
      
   2. Custom Domain: You can optionally add a custom domain that your organization owns to add users ending with your domain.  You would have to verify the domain at the next step using your Domain provider. This is optional, and can be verified later as well.
      1. Users have access to Email: Enable this if the users to be added under custom domain, will have access to their email for authentication
         
   3. Default domain or custom domain can also be added later.
2. Click Next

Step 3: Verify Domain

This step is based on your selection at Step #2.

Default domain

• If Default domain is selected, then it will be verified as per basic validations and you will get a confirmation screen of domain being setup. Click Next
  

Custom Domain

If you have selected custom domain in Step #2, you would have to verify the domain ownership using your DNS provider. Hence, you will get a different screen to Verify Domain. The details have to be added to record with your domain name registrar for verification. After adding click on Verify Now to verify:

Step 4: Complete Setup

On successful verification of domain, you will get the Complete Setup screen. This completes the setup and configuration of OneIdP in your Scalefusion account. Click on Finish

Points to Note:

• One default domain can be created under a directory
• There can be multiple custom domains

On clicking Finish, the domains in the directory will be displayed on the Directory main page. Here, 

• Activated Accounts: Displays count of users who have activated (either reset their password from invitation email or enrolled atleast one device) their accounts.
• Pending Activations: Displays count of users who have not yet activated their accounts. You can view the list of such users and also send reminders from here. Click on Pending Activation user count which will bring up a small window with list of users. Click on Send Reminder to send reminder for activating the account(s).

This helps to plan a migration for users to SSO powered by OneIdP.

Actions on Directory

Following actions can be performed once a directory is created:

1. Add Users: Adds users in the directory
2. Archive domain: Archiving the domain will not delete the users that have been already added with the domain name, however you won't be able to add new users with this domain.
3. Update Authentication Source: Select this to migrate the authentication source of users to Scalefusion OnPremise connector and let them sign in using their Active directory credentials instead of OneIdP credentials. This is enabled when default Authentication Source in Federated Authentication settings is set to Scalefusion OnPremise
4. Settings
5. Delete Directory: Deletes the directory. If any users have been added with this domain, first they have to be deleted from User Enrollment section. After that, you will be allowed to delete the domain.
6. Migrate users: Users belonging to custom domain can be migrated to OneIdP. This way they don't need to access their email id for authentication while enrolling devices. The authentication will be taken care of by Directory. On clicking the icon, a dialog box will come up to migrate users. Enter the default password with which users can sign in. Alternatively you can choose to generate a random password.
   

Other Actions

Following actions can be performed from Directory page:

1. Edit Organization: The Organization Info can be edited.
2. Add Domain: With this, you can add a new default and/or custom domain.