Getting started: identify users

The second setup task configures where your users come from. Agilicus AnyX does not create duplicate user accounts: it connects to your existing identity provider, and users sign in with the credentials they already have.

What this task is for

You choose how your users authenticate. The platform needs to know which identity provider to trust, so that when a user signs in, the platform can recognise them and apply their permissions.

The choices

The guide asks which identity provider you use:

I use Microsoft to identify my users. The guide helps you configure a Microsoft identity provider (for example Azure Active Directory).
I use Google, Apple or Linkedin to identify my users. The guide helps you configure one of those providers.
I use my own internal identity provider. The guide helps you configure an onsite or custom identity provider, so your users authenticate against your own directory (for example Active Directory) without their credentials leaving your network.

How to do it

Open Getting Started > Identify Users from the left navigation.
Choose the identity provider type that matches your organisation.
Follow the guide’s questions (for example whether you have a Microsoft account type, or whether you need to run your own identity provider).
When the guide points to the identity configuration screens, open Authentication > (Shared, Custom, or Onsite Identity) and complete the configuration for your provider.
Test that a user can sign in.
Mark Identify Users complete on the task board.

After you finish

Users can authenticate. You can now expose resources (Expose a resource) and grant access to those users (Assign permissions).

Configuration versus diagnostics

Configuration: setting up the identity provider (see Identity and authentication and the Authentication section of this guide).
Diagnostics: verifying sign-in events in the authentication audit.

Troubleshooting

Users cannot sign in: check the identity provider configuration and the authentication policy; verify sign-in attempts in the authentication audit.
Users sign in but have no access: permissions are a separate step, see Assign permissions.