Creating managed users

Unlike native users (those using an email address as their username) a managed user cannot create their own Trimble ID, so the responsibility to provide an application that will allow administrators to create managed users lies with the product team.

Basic managed user flow

To onboard users to the profiles system and enable them to use Trimble Identity sign-in, use the following API operations.

First steps

Implement an application that administrators will use to create and administer managed users. This application will need to provide a UI that enables customer administrators to:

1. Create an account with profiles. The account name must match the account that’s already in the system.
2. Create a managed user group. The user who creates a managed user group becomes the administrator of the group by default.
3. Add administrators to the managed user group.

Administrating managed users

• Add a user to the managed user group. The user name and a temporary password of the user are passed in the Request Body while adding the user to the managed user group.

field name	string
firstName	First name of the user
lastName	Last name of the user
tempPassword	Temporary password of the user
username	Username provided by the user

• Change a user’s password. Change the password of the user by providing a temporary password in the request body.
• Delete a user. Soft deletes the user based on the unique id as input.

Password policy for creating a managed user

• Minimum characters expected - 6 characters
• Maximum characters allowed - 16 characters
• Must contain at least 1 number, 1 uppercase letter, and 1 lowercase letter
• Allowed combination - alphanumeric. Special characters are not allowed.
• Temporary passwords set by administrators expire in 180 days