Method to "Intervene" after a login, to force user to update contact info - onelogin

Every 3 months, we have a requirement to force a user to an app to update their contact info (this is an in-house app, and we also will have situation that is an app to update emergency alert phone and email addresses) before they can access any other apps on the onelogin dashboard. Once a user has updated their info, then they can access the onelogin dashboard as usual. Do you have any examples or provide any ideas of how this could be done?

An account administrator can log into their companies onelogin portal.
In the upper right hand corner there is link Administration click it.
In the administration panel hover over the Security tab and select Policies when it appears.
Start a new policy. On the left side there is a tab Password. This allows you to enforce the password age policy.
Once the policy has been configured, it just needs to be applied to the users.

Related

waiting for approval tab does not show disable users in Kentico 10

I've checked this option in settings that says: "Registration requires administrator's approval:" in kentico10.
and in my custom registration web part I've unchecked Enable user after registration.
but I can't see unable users waiting for the approval tab.
as below picture.
It's because you checked the setting Registration requires email confirmation in Settings -> Security and membership
you need to unchecked this. since it's checked, system will send email to user after registration. while your email configuration has a problem, user can not received the confirmation link and it wont be worked.

company branding doesn't work for password page in Azure Portal

I've created company branding from the Azure portal for my application.
This is working as expected for the first page i.e, the username page. When I click on next for the password page, the custom branding disappears and default Microsoft background appears.
I want the branding to be continued for the password page also so that there would be consistency.
You probably try to sign in with a Microsoft Account instead of your Azure Active Directory account. If you sign in with a "native" Azure Active Directory account you will continue see your company branded page.
You can customize your Azure AD sign-in pages, which appear when users sign in to your organization's tenant-specific apps, such as https://outlook.com/contoso.com, or when passing a domain variable, such as https://passwordreset.microsoftonline.com/?whr=contoso.com.
Your custom branding won't immediately appear when your users go to sites such as, www.office.com. Instead, the user has to sign-in before your customized branding appears.
Visit this link for more information
https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/customize-branding

AAD in Azure API Management, avoid signup dialog

In Azure API Management you can enable integration with AAD, by following the guidelines in this article:
https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-aad
This part describes the sign in after setting up AAD integration:
https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-aad#a-idlogintodevportalsign-in-to-the-developer-portal-by-using-an-azure-ad-account
In step 3 of of this part, the following is mentioned:
"You might be prompted with a registration form if any additional information is required."
I don't want to bother my consumers with this dialog, but I can't find what 'additional information' is meant here.
The sign up dialog only shows email, first name and last name.
Anyone knows what information the registration process is missing, which leads to this dialog to show up?
I don't want to bother my consumers with this dialog, but I can't find what 'additional information' is meant here. The sign up dialog only shows email, first name and last name.
If you don't want to enable the registration process, you could delete Username and password
provider from azure portal.
It will just use the Azure AD provider. then it will not prompted with a registration form.
Updated:
If I click sign up, I get the registation is disabled.
After consulting the Azure API Management product group, it became clear you cannot disable this dialog at the moment.
The documentation is mentioning the dialog is only prompted in a certain case, but that's is not accurate. The dialog will always be shown when you sign in on the developer portal, when the Azure API Management is integrated with AAD.

SOBO - where are the settings in admin?

From the documentation, where exactly is the settings for these 2 in the admin site?
Users who want to authenticate on behalf of other account users must have the following settings enabled to use SOBO:
apiAccountWideAccess
allowSendOnBehalfOf
If you are setting user permissions through the DocuSign web console these correspond to the Account-Wide Rights and Send On Behalf Of Rights (API) settings.
I had to switch to "Classic" version of Admin to find it. Hit the dropdown under your picture and choose Preferences. From there, it is under the permissions tab.

How to assign a business account to user in acumatica?

I am trying to assign an Business account to an user and not able to figure out how to do it.
I believe you are trying to customize Catalog form (SP700000) on Acumatica Portal site and getting Your user profile is not associated with any Business Account message.
Associated business account check is done in constructor of the InventoryLineMaint Graph linked to this page and if not found; exception is raised which is correct by design. And that’s the reason you are seeing this message.
To customize this screen using Acumatica Customization Browser, you should create an admin Portal user who is associated with business account.
Allow roles Customizer and Portal Admin for External User Type. You need to check Guest Role for these two in order to add here.
Step # 1
Login to ERP using admin credential, navigate to User Roles screen (SM201005), and check Guest Role for Customizer and Portal Admin roles in order to add them on EP202500.
Step # 2
Now navigate to User Types screen (EP202500), and select External User Type. Modify to allow roles Customizer and Portal Admin for External User Type.
Step # 3
Now create External user.
Navigate to Customers Screen (AR303000) and select ABARTENDE customer. Go to Contacts tab and open up existing Contact - Kabuk Fadi, Mr. (CR302000) Navigate to User Info tab and setup External user as below.
Step # 4
Now login to Portal site using this user. You should be able to customize page SP700000 via Acumatica Customization Browser.

Resources