Employees management

IPI Enterprise Server – Employee management

On IPI Enterprise Server, you can perform the following actions with employees:

• Edit personal information.

• See the employee's details

• Change roles.

• Deactivate accounts.

• Delete accounts.

• Unlock accounts after failed login attempts.

• Activate or reactivate the Single Sign-On (SSO) feature

Editing Personal Information

An administrator can edit the following details of an employee:

• First Name.

• Last Name.

• Email Address.

• Phone Number.

• Company.

• Department.

• Position.

How to edit:

1. Go to the Employees section.

2. Select the required employee and click Actions → Edit.

Note: Editing is not available for employees imported from Active Directory or EntraID (Azure AD)

Viewing Employee Details

To view user account information, you can:

• Double-click on the row with the user's name.

• Click on the row with the desired user and click the Details button.

All IPI keys and user accounts are visible in the window that appears.

In this window, you can create a personal account, add a shared account, edit a personal account, add a key to the user, and delete the key from the user.

Also, here you can see the list of user's FIDO2 authenticators and IPI Authenticator applications and delete them:

Changing an Employee's Role

The administrator can assign the administrator role to an employee or revert them to a regular user.

How to change a role:

1. Go to the Employees section.

2. Select the required employee and click Actions → Change Role.

3. Select the new role for the employee.

Deactivating an Employee

A deactivated employee:

• Cannot log in to the IPI Server.

• Loses access to web services that use Single Sign-On via IPI Server.

• Loses access to Active Directory if imported from there.

How to deactivate:

1. Go to the Employees section.

2. Select the employee and click Actions → Deactivate.

Delete Employee

How to delete:

1. Go to the Employees section.

2. Select the employee and click Actions → Delete.

Important:

• Unlink the IPI Key from the employee before deleting them.

• If this is not done, the system will display an error message.

Unlock employee account

If a user attempts to log in with the wrong password 10 times, their account will be locked. The user can wait for 15 minutes for the account to be automatically unlocked and then log in with the correct password, or they can ask the administrator to manually unlock the account following the guide below.

Employees with locked accounts have a corresponding icon next to their name.

To unlock such account click it and then click the "Unlock" button.

Then confirm the unlock operation.