Speaking of users...

A list will be displayed with all users registered in the company context in TOTVS Identity, both those imported from an Active Directory and those created manually. Next to each user's name, you can check the account type (Regular user or Administrator) and the status in the company (Activated, Invited, Deactivated, or Blocked).

The available options are:

• Filter by type: allows filtering by regular users or administrators.
• Filter by status: allows filtering by status in the company (Activated, Invited, Deactivated, or Blocked).

The records displayed on the page at the moment the Export button was clicked will be exported to a CSV file. A link valid for 48 hours is sent to the email address of the administrator who requested the report for downloading the exported file.

The browser should automatically present the option to save a file in CSV format. If this does not occur, in the open tab, click the Download option.

The CSV file contains the email, identifier, full name, role (regular user or administrator), and the current status at the time of generating the report.

The requested information is:

First Name
User's first name

Last Name
User's last name

Would you like to enable access with a username?
^{This field is displayed only if username access is enabled for the company.}
By enabling this option, the user will access the system using a username instead of an email. This access method is only available for regular users.

Username
^{This field is displayed only if username access is enabled.}
Login used for authentication in Identity and TOTVS applications. This login must meet the following requirements: be up to 150 characters long, not start or end with special characters, and be unique within the company.

Email
^{This field is displayed only if username access is disabled.}
Email address that will be used for authentication in Identity and TOTVS applications. The email address must be valid and unique for each account in the context.

Would you like to make this user an administrator?
By enabling this option, it defines that this user will have an administrator role, managing users, groups, applications, and other settings in the Identity context.

In the Activation Options section, the method of account activation is selected. The available options are:

• Invitation Email: When checked, account activation is performed through a link contained in the invitation sent to the user's email.
• Temporary Password: When checked, account activation is performed as soon as the registration is completed by the administrator. To view the generated temporary password, the administrator must access the user view page. No invitation is sent via email in this activation mode.

The Custom Fields section is displayed only if there are fields created in the Identity Customization feature.

By default, the user is automatically associated with the Everyone group, which includes all users in the company. It is possible to use the search to filter if there are many registered groups.

By associating the user with the groups, all linked applications will be automatically associated with the user.

The user is automatically associated with the applications linked to the Everyone group and any other groups they are added to. It is possible to use the search to filter the desired applications.

Name
Single field for the user's first and last name.

Email or Username
Email or name used for the user's access to the company context in Identity.

User Type
The existing types are: administrator or regular user.

• Administrator: this type of account ensures access to user management, groups, applications, and other settings in the Identity context.
• Regular user: this type of account allows access to navigable applications or those assigned to the user by the administrator and to the user's personal profile.

Status
The user can be Activated, Invited, Deactivated, or Blocked. Below the status, the date of the last change in the user's status is presented.

Department
Department linked to the user.

Temporary Password
The temporary password is displayed only if the user has not yet changed the temporary password generated by the administrator.

Custom Fields
^{The Custom Fields section is only presented if there are fields created in the Identity Customization feature.}
If there are custom fields, these fields appear for consultation below the user's registration information.

Groups
Number of groups to which the user has been associated.

Applications
Number of applications assigned to the user.

Active Directory Provisioning
Status of users imported from Active Directory. Allows for the provisioning of the account in Active Directory, if there is a directory linked to the context.

MFA Authentication
Indicates the status of multi-factor authentication access for this user: Disabled, Configured, and Not Configured.

The information that can be changed includes: Username, User Type, Department, and custom fields (if any). The email or username cannot be changed by the administrator.

The data for the respective user related to the current company will be downloaded in a JSON file. In this file, it is possible to review the entire history of views and changes that have occurred in the personal data related to this user.

A list is presented with all the groups registered in the context of the company in TOTVS Identity, both those imported from Active Directory and those created manually.

A list is presented with all the groups to which the user has been associated.

A list is presented with all the applications registered in the context of the company in TOTVS Identity.

The applications assigned directly to the user's account or associated with the user's groups will be listed. Only the applications associated with the user can be removed through this screen.

The Active Directory Provisioning panel displays the provisioning status of the user in Active Directory.

• Provisioning enabled : Displays the AD in which the user is provisioned and the More details option to consult the Active Directory data (Account domain, Root DN, ObjectGUID, and ImmutableID).
• Provisioning not configured : The Provision option is presented for the user to be created in one of the AD directories linked to the context of TOTVS Identity.
• Provisioning available for configuration : If there are no ADs linked to the company's context in Identity, no information will be displayed in the panel, and the background color will be gray.

The Account domain, Root DN, ObjectGUID, and ImmutableID of the user synchronized with Active Directory will be listed for consultation.

The necessary data for provisioning are:

Active Directory
Select the desired directory from those linked in Identity.

Root DN and Account Domain
The Root DN and Account Domain fields are automatically filled based on the selected Active Directory but can be edited if desired.

Temporary Password and Re-enter Password
Enter the temporary password and repeat the password for confirmation. This password will be assigned only to the user's account created in Active Directory.

A request will be sent to Active Directory via SmartSync to create the user in the chosen domain. After provisioning, the user will be able to authenticate with the Active Directory password in this Identity context, provided that the company's administration has enabled this feature.

The MFA Authentication panel presents the status of this security feature for the user in question.

• MFA authentication enabled : The configuration has been completed by the user, and the Disable option can be used by the administrator in case of loss or theft of the user's device.
• MFA authentication disabled : The user has not yet configured multifactor authentication on their account.

The justification is mandatory and will be recorded in history; it can later be consulted in the audit report.

If the user is part of a group with mandatory MFA, it is necessary to configure multifactor authentication again for access to Identity to be granted.

Uma nova mensagem de convite é enviada ao e-mail do usuário com um link para ativação da conta nesse contexto do TOTVS Identity.

Após acionar essa opção, a senha temporária é copiada para a área de transferência do usuário autenticado, e deve ser repassada ao usuário que necessita do acesso ao Identity. No primeiro login, o usuário é obrigado a alterar essa senha.

Após acionar essa opção, será apresentada ao administrador uma senha temporária. Essa senha deve ser informada ao usuário, para que ele possa efetuar o login normalmente. No primeiro login, o usuário é obrigado a alterar essa senha.

Data Inicial
Data em que o usuário deve ser desativado. Caso a data inicial configurada seja a atual, a desativação pode levar algumas horas para ser executada.

Data Final
Data em que o usuário deve ser reativado.

Descrição
Campo opcional, para que sejam incluídas mais informações sobre a desativação.

Após salvar, o período de desativação temporária será apresentado na tela de dados do usuário.

A desativação temporária não sincroniza a situação do usuário desativado no TOTVS Identity com o Active Directory.

O período de desativação temporária será apresentado na tela de dados do usuário.

O usuário não será desativado no período definido previamente.

Após confirmar, o usuário não terá mais acesso ao contexto em que foi desativado, a menos que seja reativado por um administrador.

Nos contextos em que a opção Sincronizar mudanças no estado do usuário do Identity para o Active Directory esteja ativada, o usuário também será desativado no Active Directory.

O usuário volta a ter acesso completo à conta no contexto.

Após confirmar, a conta do usuário será totalmente removida da empresa e não poderá ser restaurada. O usuário não terá mais acesso ao contexto do TOTVS Identity do qual foi removido.

Caso o usuário excluído tenha sido importado a partir do Active Directory, sua conta será automaticamente incluída na lista de Rejeitados.

Com isso, o usuário estará poderá voltar a tela de login para autenticar-se ou acionar a opção Esqueceu sua senha?.

Caso o usuário tenha um e-mail de reset de senha configurado, ele próprio consegue realizar o desbloqueio pela opção de recuperação de senha pessoal.

<!-- Hotjar Tracking Code for http://tdn.totvs.com/display/fb -->
<script>
    (function(h,o,t,j,a,r){
        h.hj=h.hj||function(){(h.hj.q=h.hj.q||[]).push(arguments)};
        h._hjSettings={hjid:1280165,hjsv:6};
        a=o.getElementsByTagName('head')[0];
        r=o.createElement('script');r.async=1;
        r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv;
        a.appendChild(r);
    })(window,document,'https://static.hotjar.com/c/hotjar-','.js?sv=');
</script>