The account details page gives you a full view of a specific account and direct access to common management actions, including resetting passwords, changing account status, and managing authenticators.
To open an account's details page, go to Accounts, find the account, and click the account name or Details on the right.
All account fields are visible without masking. You can view everything except the password.
Account information
The account information section is divided into four subsections.
Basic information — Core identity fields for the account. These fields are required when creating or editing an account.
Other information — Account metadata, including the creation source, creation time, and recent usage information.
Bound accounts — Third-party accounts linked to this IDaaS account. If a user wants to change a binding, you can detach the account so the user can rebind it.
Whether a bound account can be detached depends on how it was originally bound:
| Binding method | Can be detached |
|---|---|
| Imported from an identity provider (IdP) such as DingTalk or Active Directory (AD) via data synchronization | No |
| Bound to an OpenID Connect (OIDC) identity provider | Yes |
| Manually bound in the CloudSSO user portal (for example, a user manually binding DingTalk after logon) | Yes |
OTP - Bound dynamic password — If a user's device is lost or replaced, detach the one-time password (OTP) authenticator so the user can attach a new one. Each account supports only one OTP authenticator at a time.
WebAuthn - Registered authenticator — Manually register or delete a WebAuthn authenticator for a user.
View permissions
The View permissions section lists all applications the account can access based on the current authorization policies.
Status changes
The following actions are available on the right side of the navigation bar:
Reset password
Disable/Enable account
Unlock account
Delete account
For a full explanation of account states and transitions, see Account lifecycle.
Reset password
Reset the password for a specific account. The new password must meet the configured complexity requirements. Use Auto-generate to create a compliant password automatically. After setting the password, copy the account name and password with a single click to share the credentials.
