IdP management with the Unstructured UI

The following information applies only to dedicated instance and in-VPC deployments of Unstructured Business.

IdP integration is not available for Unstructured Let’s Go, Pay-As-You-Go, or Business SaaS accounts.

The following information assumes that Unstructured has already connected your organization’s IdP to your Unstructured account. For more information, see Getting started.

Add an IdP group to an organizational account

1. If you are not already signed in, sign in to your Unstructured account.

2. In the top navigation bar, in the organizational account selector, select the name of the organizational account that you want to add the IdP group to.

3. In the sidebar, above your user icon, click the Settings (gear) icon, and then click Manage Account.

4. In the top navigation bar, click IdP Groups.

5. Click + New Group.

6. On the Connect Group page, for Identity Provider Group, type the name of the IdP group that you want to add, and then click Continue.

   You must type the name of the IdP group exactly as it appears in your IdP. Otherwise, Unstructured will not be able to successfully complete the connection to that IdP group through your IdP.

7. On the Assign Account Role page, for Account Role, select the name of the organizational account role that you want to assign to the IdP group for this organizational account, and then click Continue.

8. On the Assign Workspaces page, for Workspaces and permissions, select each workspace—and the workspace role for that workspace—that you want to assign to the IdP group, and then click Add.

   The Assign Workspaces page does not apply if the IdP group is assigned the Super Administrator organizational account role. This is because an IdP group with the Super Administrator role automatically has full access to all of the organizational account’s workspaces.

9. Click Save Group.

The organizational account and workspaces’ roles’ permissions are enabled for each of the IdP group’s existing users the first (or next) time they sign in to your Unstructured account and then choose this organizational account.

Whenever you add a user to the IdP group, they get the associated account and workspace roles’ permissions the next time they sign in to your Unstructured account and then choose this organizational account.

If a user is already signed in to your Unstructured account and has chosen this organizational account, but they are not getting the permissions they expect, the user should try signing out of your Unstructured account and then signing back in and choosing this organizational account again, to get those permissions.

If you remove a user from the IdP group, the associated account and workspace roles’ permissions are revoked for them the next time they sign in to your Unstructured account and then choose this organizational account. An exception to this is if the user was otherwise added as an individual user to the account.

Add an IdP group to a workspace

This procedure assumes you have already added the IdP group to your Unstructured account. Learn how.

1. If you are not already signed in, sign in to your Unstructured account.

2. In the top navigation bar, in the organizational account selector, select the name of the organizational account that contains the workspace you want to add the IdP group to.

3. In the top navigation bar, in the workspace selector, select the name of the workspace you want to add the IdP group to.

   If the workspace selector is not showing next to the organizational account selector then, in the top navigation bar, click the Workspaces tab, and then click the name of the workspace you want to add the IdP group to.

4. On the Members tab, click Add New +, and then click + Add Group.

5. Select the IdP group to add and its workspace role for this workspace, and then click Continue.

Change a workspace role for an IdP group

This procedure assumes you have already added the IdP group to your Unstructured account and the workspace within that account. Learn how.

1. If you are not already signed in, sign in to your Unstructured account.

2. In the top navigation bar, in the organizational account selector, select the name of the organizational account that contains the workspace that refers to the IdP group whose role you want to change.

3. In the top navigation bar, in the workspace selector, select the name of the workspace that refers to the IdP group whose role you want to change.

   If the workspace selector is not showing next to the organizational account selector then, in the top navigation bar, click the Workspaces tab, and then click the name of the workspace that refers to the IdP group whose role you want to change.

4. On the Members tab, click the ellipsis (three dots) next to the name of the IdP group whose workspace role you want to change.

5. Click Edit Permissions.

6. Select the IdP group’s new workspace role for this workspace, and then click Continue.

Change an account role for an IdP group

This procedure assumes you have already added the IdP group to your Unstructured account. Learn how.

1. If you are not already signed in, sign in to your Unstructured account.
2. In the top navigation bar, in the organizational account selector, select the name of the organizational account that contains the IdP group whose organizational account role you want to change.
3. In the sidebar, above your user icon, click the Settings (gear) icon, and then click Manage Account.
4. In the top navigation bar, click IdP Groups.
5. Click the name of the IdP group whose organizational account role you want to change.
6. Next to Account Role, click the edit (pencil) icon.
7. Select the new organizational account role for the IdP group whose organizational account role you want to change, and then click the apply (check mark) icon.

Add individual users to an account

Unstructured recommends that you add IdP groups to an organizational account, instead of adding individual users. Managing IdP groups can be easier, faster, and less error-prone than managing individual users.

However, if you must add individual users to an organizational account (for example, if you want to give a user access to an organizational account at a different level than the access that is granted to them through their IdP groups), you can do so by following these steps.

1. If you are not already signed in, sign in to your Unstructured account.

2. In the top navigation bar, in the organizational account selector, select the name of the organizational account.

3. In the sidebar, above your user icon, click the Settings (gear) icon, and then click Manage Account.

4. On the Members tab, click New Member +.

5. In the Add New Member dialog, for Email, type the email address of each individual user to add.

6. For all of the email addresses that you typed, select the organizational account role for all of the individual users at once, and then click Continue.

   An organizational account role that is assigned to an individual user always overrides any organizational account role that is assigned to any IdP group to which that user belongs. This override happens the next time they sign in to your Unstructured account and then choose this organizational account.

7. Click Continue.

Add individual users to a workspace

Unstructured recommends that you add IdP groups to your workspaces, instead of adding individual users. Managing IdP groups can be easier, faster, and less error-prone than managing individual users.

However, if you must add individual users to workspaces (for example, if you want to give a user access to a workspace at a different level than the access than is granted to them through their IdP groups), you can do so by following these steps.

1. If you are not already signed in, sign in to your Unstructured account.

2. In the top navigation bar, in the organizational account selector, select the name of the organizational account that contains the workspace for the individual users you want to add.

3. In the top navigation bar, in the workspace selector, select the name of the workspace that you to add the individual users to.

   If the workspace selector is not showing next to the organizational account selector then, in the top navigation bar, click the Workspaces tab, and then click the name of the workspace you want to add the individual users to.

4. On the Members tab, click Add New+, and then click + Add Member.

5. In the Add New Member dialog, for Email, type the email address of each individual user to add.

6. For all of the email addresses that you typed, select the workspace role for all of the individual users at once, and then click Continue.

   A workspace role that is assigned to an individual user always overrides any workspace role that is assigned to any IdP group to which that user belongs. This override happens the next time they sign in to your Unstructured account and then choose this organizational account.

7. Click Continue.

Change a workspace role for an individual user

This procedure assumes you have already added the individual user to your Unstructured account and the workspace within that account. Learn how.

1. If you are not already signed in, sign in to your Unstructured account.

2. In the top navigation bar, in the organizational account selector, select the name of the organizational account.

3. In the top navigation bar, in the workspace selector, select the name of the workspace.

   If the workspace selector is not showing next to the organizational account selector then, in the top navigation bar, click the Workspaces tab, and then click the name of the workspace that contains the user for whom you want to change the workspace role.

4. On the Members tab, next to the user’s email, click the ellipsis (three dots), and then click Edit Permissions.

5. Select the new workspace role for the user, and then click Continue.

Change an account role for an individual user

This procedure assumes you have already added the individual user to your Unstructured account. Learn how.

1. If you are not already signed in, sign in to your Unstructured account.
2. In the top navigation bar, in the organizational account selector, select the name of the organizational account that contains the user for whom you want to change their organizational account role.
3. In the sidebar, above your user icon, click the Settings (gear) icon, and then click Manage Account.
4. On the Members tab, click the user’s email.
5. Next to Role, click the edit (pencil) icon.
6. Select the new organizational account role for the user, and then click the apply (check mark) icon.

Remove an individual user from a workspace

This procedure assumes you have already added the individual user to your Unstructured account and the workspace within that account. Learn how.

Removing an individual user from a workspace does not necessarily revoke all access to that workspace!

After you remove an individual user from a workspace, any workspace role that is assigned to any IdP group to which that user belongs will then be applied. This happens the next time they sign in to your Unstructured account.

This procedure assumes you have already added the user to your Unstructured account and the workspace within that account. Learn how.

1. If you are not already signed in, sign in to your Unstructured account.

2. In the top navigation bar, in the organizational account selector, select the name of the organizational account that contains the workspace.

3. In the top navigation bar, in the workspace selector, select the name of the workspace.

   If the workspace selector is not showing next to the organizational account selector then, in the top navigation bar, click the Workspaces tab, and then click the name of the workspace that contains the user you want to remove.

4. On the Members tab, next to the user’s email, click the ellipsis (three dots), and then click Remove Member.

5. To confirm the removal, click Continue.

Remove an individual user from an account

This procedure assumes you have already added the individual user to your Unstructured account. Learn how.

Removing an individual user from an organizational account does not necessarily revoke all access to that organizational account!

After you remove an indivdual user from an account, any organizational account role that is assigned to any IdP group to which that user belongs will then be applied. This happens the next time they sign in to your Unstructured account.

This procedure assumes you have already assigned the user to the account. Learn how.

1. If you are not already signed in, sign in to your Unstructured account.
2. In the top navigation bar, in the organizational account selector, select the name of the organizational account.
3. In the sidebar, above your user icon, click the Settings (gear) icon, and then click Manage Account.
4. On the Members tab, next to the user’s email, click the ellipsis (three dots), and then click Remove Member.
5. To confirm the removal, click Continue.

Remove an IdP group from a workspace

This procedure assumes you have already added the IdP group to your Unstructured account and the workspace within that account. Learn how.

After you remove an IdP group from a workspace, all users in that group will lose access to the workspace, unless they were otherwise added as individual users to the account.

If they were not otherwise added as individual users to the workspace, they will lose access to that workspace the next time they sign in to your Unstructured account.

1. If you are not already signed in, sign in to your Unstructured account.

2. In the top navigation bar, in the organizational account selector, select the name of the organizational account that contains the workspace.

3. In the top navigation bar, in the workspace selector, select the name of the workspace you want to remove the IdP group from.

   If the workspace selector is not showing next to the organizational account selector then, in the top navigation bar, click the Workspaces tab, and then click the name of workspace that contains the IdP group you want to remove.

4. On the Members tab, next to the IdP group’s name, click the ellipsis (three dots), and then click Remove Member.

5. To confirm the removal, click Continue.

Remove an IdP group from an account

This procedure assumes you have already added the IdP group to your Unstructured account. Learn how.

After you remove an IdP group from an organizational account, all users in that group will lose access to the organizational account, unless they were otherwise added as individual users to the account.

If they were not otherwise added as individual users to the organizational account, they will lose access to that organizational account the next time they sign in to your Unstructured account.

1. If you are not already signed in, sign in to your Unstructured account.
2. In the top navigation bar, in the organizational account selector, select the name of the organizational account.
3. In the sidebar, above your user icon, click the Settings (gear) icon, and then click Manage Account.
4. In the top navigation bar, click IdP Groups.
5. Click the name of the IdP group you want to remove from the organizational account.
6. In the settings pane, click Delete Group.
7. To confirm the removal, click Continue.