Overview
Users can sign in at the FUYL Kiosk, and may be authorized to use a workflow. Groups are collections of users, and can be used to specify workflow authorization.
Users and groups can be found in the FUYL Portal under Settings > Users , and are populated via an organization's own identity provider through Single Sign On (SSO) and/or provisioning. If an admin is required outside of this connection, they can be invited manually (see Roles and Permissions).
SSO and provisioning
The top of the Users page shows the status of Single Sign On and provisioning. Select Configure to set up or alter an existing configuration. Planning your Identity and Authentication helps decide what's needed before starting, and Set up SSO & Provisioning covers the full process.
Users and groups
The Users and Groups tabs list a combination of users and groups synced via provisioning, and users provisioned just-in-time (JIT) when they first sign in with SSO. Use Search to find a user quickly, or Filters to narrow the list by name, email or group.
Provisioning scheduling depends on the external source. Microsoft Entra, for example, processes a sync every 40 minutes by default. Most allow a manual sync to be triggered.
Groups require provisioning to be configured, and for those groups to be included in the sync. Without provisioning, the Groups tab shows No groups.
Restricting access to workflows
By default, every user who can sign in can use every workflow. To limit a workflow to specific users, link one or more groups to it when creating or editing the workflow (Link user groups). Only members of those groups can then use that workflow at the FUYL Kiosk.
Each workflow's Administration article covers this setting, for example; Device Loaning Administration.
Who can view and manage users
Every role can view users and groups. Only Admins can configure SSO and provisioning, or assign roles. See Roles and Permissions for more on what each role is allowed.