====== How do I set up a user account for an employee in an SSO (Single Sign-On) client? ======

<WRAP round info 100%> Logging in via SSO (Single Sign-On) must be configured for the client. It is not available by default. If you are interested, please contact our support team via a ticket. \\ \\
A client that uses SSO (Single Sign-On) is marked under //Administration -> Clients & Customers// with: {{:en:clientsettings_sso_active.png?nolink&100|}} </WRAP>

<WRAP round important 60%>
To use this area in promio.connect, you need the right //Manage clients//! \\ This right is included in the role //Admin/Verwalter//.
</WRAP>

You can set up and edit user accounts in the //Management// area. You can access this via the {{:de:button_clientsettings.png?20|}} button at the top left.

{{:en:management_account.png?nolink&400|}}

In the //Client/Company// area, click on //Companies & Clients//. Here you will find three tabs:

* **User accounts**: Set up, change, deactivate, or delete user accounts. 

* **Licenses**: View your existing licenses for certain tools. 

* **Companies & Clients**: Create new clients/sub-clients and set up, change, deactivate, or delete user access for them. 

===== Create a new user account =====

- Select the //User accounts// tab to create a user in the current client. \\ OR \\ In the //Companies & Clients// tab, click to select the client in which you want to create a user. The client must be marked as a sender. \\ \\
- Select the action //Create user account// at the bottom right. \\ {{:en:button_create_useraccount.PNG?150|}} \\ \\
- In the dialog that opens, assign a role to the new user and enter the employee's name and email address. The email address must be identical to the one with which the user authorizes himself in the company's own system (e.g., ADFS). Close the dialog using the button //Create user account//. \\ {{:en:clientsettings_useraccount_sso.png?400|}} \\ \\
- Once the user has been created, switch to the tab//Control clients access//. Here you can use the checkbox to mark the clients that the user should have access to as permitted. If you mark the flag on the right, this sets the default client for the user, to which he is automatically directed after logging in.


===== Edit a user account =====

Click on a user to access the details and make the following changes:

{{:en:clientsettings_user_sso.png?400|}}

* **Edit**: Change first name, last name, email address, or user name.

* **Role**: Change role assignment.

* **Control client access**: Default: Access to all clients or use the checkbox to specify which clients the user may access, optional: Select the default client to which the user automatically switches after logging in.

* **Deactivate**: Deactivate a user. A deactivated user can be reactivated if necessary. 6 months after deactivation, a user is automatically deleted for data protection reasons.

* **Delete**: Delete user. A deleted user is completely removed and can no longer log in.


===== Restore user =====

If a user was deleted accidentally or automatically due to inactivity for data protection reasons, they can be restored. In this case, please contact our support team via a ticket.


<WRAP round tip 60%>
In the article //"[[en:how_to_create_a_role]]"// you can find out everything about roles and rights. \\ \\
For more information on controlling a user's client access, see the article //"[[en:how_to_control_client_access]]"//.
</WRAP>

{{tag>SSO Single_Sign_On User_Accounts User_Account Rights Roles Access Password Reset }}