Skip to main content
To work with Vindicia IDP 1.0 ,there are several screens for Authentication and User Management that require configuration in Subscribe/Retain Portal 1. The order of their use is important, please follow the flow as shown below. These screens are relevant only after the merchant was created.
  1. IDP Merchant Configuration - this screen is available for Vindicia internal admin users as part of the Admin menu in Portal 1. It serves to configure the Authentication method to be used. Several authentication IDP can be configured but only a single one can be active at a given time. It is important to first define the merchant’s IDP (authentication) and only then start adding merchant users.
  2. User Management - this screen is available for Vindicia internal admin users as part of the Admin menu in Portal 1. It serves to add merchant users to the Merchant account. When an automated integration is available for users (such as is the case for Vindicia IDP-ulm), added users will also be added in the IDP. Note: If no IDP is defined and activated in the IDP Merchant Configuration screen and users are added, they’ll be receiving portal-generated passwords by default.
Parent topic:Vindicia Portal Users and Authentication

​
Configure Authentication (IDP) Configuration

  • The relevant merchant must already be created in the system
  • Ensure you’ve received External IDP credentials from merchant (MAC), if needed. For details, see External User Authentication.
  • Ensure you have the merchant’s MAC document or Retain Onboarding doc and received any guidance about increasing security for password reuse or lifetime. For details, see Password Requirements
  • If planning to use Vindicia IDP, open a ticket based on VIN-19073 template with the ulm team (Amin-Eshtehardi) - one day turnaround expected. You can also include Password Settings requirements , if those were provided by Merchant., for details, see Password Requirements
  • Ensure you’ve received Merchant’s user and role list
  1. Using an Admin user, access Subscribe Portal 1.0 https://secure.staging.us-west.vindicia.com/login/secure/
  2. Select Admin > IDP Merchant Configuration The IDP Merchant Configuration screen appears. IDP Merchant Configuration Screen- Vindica IDP (ulm)
  3. Select the relevant Merchant from the Merchant Name drop-down list.
  4. Select the relevant Identity Provider from the Provider Name drop-down list. Available values:
    • ulm - This is the Vindicia IDP value and will be the one defined for new merchants
    • okta - use when configuring external user authentication with Okta Idp
    • azure - use when configuring external user authentication with MS Azure
    • testIdp- used for testing only
  5. Define the IDP fields as needed. Refer to the tables below for guidance regarding the fields.
  6. Click Save Configuration. The entered configuration is saved. Note: This only saves the configuration but does not activate it. Only one IDP can be active per merchant.
  7. For ulm (Vindicia IDP) only, click M2M API Configuration and enter the Machine-to Machine details for automatic user registration in both Vindicia portal and ULM. Refer to the tables below for guidance regarding the fields. If entered details were not required, click Clear M2M Data.
  8. When ready, click Activate Configuration. Remember: Only one IDP configuration can be active per merchant at one time. Inactivate any other configuration before activating new configuration.
The merchant is defined as using Single sign on to the Vindicia portal via the configured IDP. The merchant’s users will be redirected to the IDP for log in authentication. Parent topic:Configuring Merchant Authentication with Vindicia IDP 1.0 and User Definition

​
IDP Configuration Fields

​
Configure Users for Vindicia IDP 1.0

Users are added per merchant in the User Management screen for Vindicia IDP 1.0. For merchant users, it is best to add their work emails as the username. Note: For Vindicia IDP 2.0 or basically merchants that are configured as ulm_proxy, ULM is the source of truth for the users and their roles. Users will not be added in the Portal 1.0 screen as described here rather in Vindicia IDP 2.0 console. If using Vindicia IDP as the main Sign in method, ULM’s backend API automatically clones the user into the Vindicia IDP. This is achieved by configuring the ulm IDP screen and M2M API details. To add merchant users:
  1. Using an Admin user, access Subscribe Portal 1.0 https://secure.staging.us-west.vindicia.com/login/secure/
  2. Select Admin > User Management A blank User Management screen appears.
  3. From the dropdown list, select the relevant merchant. The User Management screen appears. Subscribe/Retain user Management screen
  4. Choose from the following:
    • To add a new user, click Add.
    • To edit an existing user, select the user and click Edit. Note: Editing existing users will require a manual change in the Vindicia IDP Care console as well.
    • To remove an existing user, select the user and click Delete.
  5. Enter a Username (work email), User Type and select a User Role from the list. Note: The user roles appear based on the merchant configuration. If the merchant was defined as a Retain merchant (select only) , Retain user roles appear.
  6. Click Submit.
The new/existing user is created/updated in the Portal. If Vindicia IDP was configured, the user is also created in Vindicia IDP and an email with the access details will be sent to the user. If Vindicia IDP was configured and the user was removed, the user is also deleted in Vindicia IDP. Parent topic:Configuring Merchant Authentication with Vindicia IDP 1.0 and User Definition