Use the account details page in IDaaS to review account information, manage bindings and authenticators, and change account status.
Open the account details page
You can view all account information except the password.
To open the account details page:
-
On the Accounts and Orgs menu, find the account.
-
Click the account name, or choose Details in the Actions column.
The page contains the Account Information and Permissions tabs.
Field values on this page are not masked.
Account information
The Account Information tab contains three areas: basic information, extended fields, and other information.
Basic information
Basic information is required when you create or edit an account. It includes the account name, display name, email address, organization, account ID, external ID, status, and password status.
Other information
Other information includes the account creation source, creation time, modification time, and recent usage.
Permissions
The Permissions tab shows the applications that the account can access under the current authorization policies.
Manage bindings and authenticators
Bound accounts
The Bound Accounts list at the bottom of the page shows third-party accounts and their binding information. To change a binding, unbind the third-party account so that the user can bind it again.
Whether you can manually unbind a third-party account depends on how it was bound:
-
Imported by data synchronization: Accounts imported from an identity provider (IdP), such as DingTalk or Active Directory (AD), cannot be manually unbound.
-
Bound to an OIDC IdP: The sign-in method can be manually unbound.
-
Bound by the user: A sign-in method that the user manually bound in the user portal can be manually unbound. For example, the user may bind DingTalk after signing in.
OTP authenticators
If a user loses or replaces a device, you can manually unbind the user's OTP authenticator so that the user can bind it again. Each account can have only one OTP authenticator.
In the Actions column of the bound OTP authenticator list, click Unbind.
WebAuthn authenticators
You can manually register or delete WebAuthn authenticators for a user. To register one, click Register Authenticator at the top of the page.
The registered authenticator list contains the following information:
-
Authenticator Name: Editable.
-
Usable for Primary Authentication
-
Registration Time
-
Last Used Time
-
Status: Turn the toggle on or off to enable or disable the authenticator.
-
Actions: Details and Delete.
Manage account status
In the upper-right corner of the account details page, you can:
-
Reset the password.
-
Disable or enable the account.
-
Unlock the account.
-
Delete the account.
The Account statuses topic explains each status.
Change password
You can change an account password if the new password meets the configured complexity requirements. Use Generate to generate a compliant password automatically. To share the new password, copy the account name and password with one click.
If you select Force Password Change, the user must change the password at the next sign-in.