Manage users

In 10Duke SysAdmin on the Users page, you can create user accounts for the end users who consume licenses, for the organization administrators of your customer companies, and for your own system administrators.

Learn more about how user information is managed in 10Duke Enterprise.

View users

  1. In the left sidebar, go to IDENTITY > Users.

    The user table opens.

  2. To view a user, select them in the table. Their details open below the table.

    • The Personal details tab shows the user’s personal details.

    • The Account state tab shows the user account validity and other settings.

    • The User groups tab shows the user groups that the user belongs to.

    • The Organization roles, Internal roles, and Client app roles tabs show the user’s roles that determine their access rights.

    • The Active license leases and Active sessions tabs show the user’s active license leases and user sessions.

    • The Custom properties tab shows any external metadata attached to the user account.

    For more information on these, see the instructions on how to edit users.

Troubleshooting

There may be situations where a user is unable to sign up, log in, or validate their email.

Common issues with email

A common issue is that the user missed an email (for example, an invitation or an account activation email) because it ended up in their spam folder.

Sometimes an email may also be blocked by a firewall, or the email provider may change the structure of the email’s links and cause them to become invalid.

If you’re using your own email service provider in your 10Duke Enterprise deployment, check if the log data shows any issues for the user. If your deployment uses a 10Duke instance of Amazon Simple Email Service (SES), first check if your SES notifications show any issues, and if needed, contact the 10Duke Integration Support team for further support. See more information on the email setup options.

A user is having problems with their invitation

  • Check that the email was sent to the correct email address.

  • Confirm that the invitation is still valid. Depending on your 10Duke Enterprise configuration, an invitation may only be valid for a certain period of time. See the invitation’s validity on the applicable list of invitations.

  • You can also try resending the email invitation.

A user is unable to log in

  • The user’s access may be blocked because they haven’t verified their email address (this depends on your 10Duke Enterprise configuration).

    If they’re unable to verify it themselves for some reason, you can do this manually for them.

  • If this is a new user that was created or imported through the Identity Management REST API, it’s possible that their user account doesn’t have a password defined yet.

    Check if they have received an email requesting them to activate their user account by setting a password. The other option they can use to set a password is the Forgot password feature on the login page.

  • If the client application is using the legacy password grant flow for authentication, two-factor authentication (2FA) could be the issue. If your 10Duke Enterprise configuration defines that 2FA is required also with the password grant flow, authentication using this flow fails for users who have 2FA enabled (or if 2FA is globally enforced).

    If needed, disable 2FA for the user or contact the 10Duke Integration Support team for a configuration change.

See more