Enabling or disabling a user's email sign-in account¶
Certificate Manager - SaaS administrators can selectively control which users are allowed to use email sign-in accounts for logging in. If you're a Certificate Manager - SaaS administrator, you can enable or disable the email sign-in account functionality for any user.
Important
The primary purpose for enabling the email sign-in option is for situations where your SSO goes offline—either intentionally or due to an outage of your SSO service—and an alternate authentication method is required.
As a matter of tightening security, using the email sign-in option to sign in to Certificate Manager - SaaS should be reserved for use by authorized administrators, and only in cases where SSO isn't available.
To enable or disable the email sign-in option¶
- Sign in to Certificate Manager - SaaS.
-
Click Settings > Users.
-
On the Users page, find and click the user name you want to edit.
-
Select or clear Enable email sign-in, and then click Save.
Did you know?
To complete the process, owners of accounts where you've enabled email sign-ins will need to set up their email sign-in password. Once set, then the next time they sign in to Certificate Manager - SaaS, they'll have the option of signing in using either SSO or by entering their email sign-in credentials.
Important: This is different from disabling the user account access or deleting a user's account
On the Users page, there is an Enabled option. When on, the user's account can log in to the system (via SSO, and via e-mail sign in, if that feature is enabled). When off, the user's account can not log in to the system at all, even if the Enable email sign-in option is checked, becuase the account as a whole is deactivated.