User Management

User Management in the Identity Portal governs the administrator accounts that run your organization’s identity and access setup — the IT and security admins who manage the portal itself, distinct from the broader user base managed in-product.

It helps to think of Identity Portal administrators as a separate, smaller, and more privileged population than your everyday platform users. Ordinary users are managed in-product and work with records; portal admins configure how everyone gets in — single sign-on, provisioning, and security policy. Keeping these two populations distinct is a deliberate least-privilege choice: the number of people who can change your authentication posture should be small, known, and reviewed, and separating them from the general user base is what makes that review tractable.

Inviting and managing admins

You invite an administrator, assign their role, and manage their account status — active or inactive — over time. When an admin is set up, the platform handles password setup securely, issuing a temporary password the person uses to establish their own. You can reset credentials and deactivate an account when someone no longer needs portal access.

Why these accounts are sensitive

Identity Portal admins hold the keys to your organization’s access configuration — they can change single sign-on, provisioning, and security policy. That makes these accounts especially sensitive, so managing them deliberately, keeping the list current, and deactivating promptly when someone leaves are core security hygiene. The portal makes the admin roster explicit so it’s never a mystery who holds this level of control.

Related controls

Admin accounts work alongside the security policies that govern authentication and the authentication logs that record portal access. Automated provisioning of the wider user base is handled separately under User Provisioning.