Organization Details
Use the Organization Details page to
When you add an organization, you must add the organization's identifying details, attributes, and information for the customer's first user, the initial Dayforce IAM Admin. After adding an organization, you can manage the customer's partner applications and security policies.
Contents
- Search for an organization by clicking Search on the Home page or the menu and then, on the Organizations tab, entering or selecting one or more of the following parameters:
- All or part of the organization ID code
- All or part of the organization name
- All or part of theFinance ID
- Organization status (Active, Inactive, or All)
- PSID
- FEIN
- PSID/FEIN Description
- PSID/FEN Status
- Enabled – This option searches only for organizations that have enabled data items. If the organization has no enabled data items, no results are returned.
- Disabled – This option searches only for organizations that have disabled data items. If the organization has no disabled data items, no results are returned.
- All – This option searches for all organizations with enabled, disabled, or no data items. This option is selected by default.
- Once you have entered the search parameters, click Apply Filter to search.
- Select the organization from the search results.
Your user role definition determines the organizations that you can see in search results. You can access only the organizations for the role to which your user account is assigned. For example, users with the IAM Customer Admin role can access information in only that organization. Users with the IAM Dayforce Admin role can access information for multiple organizations.
Note: The search returns organizations that match the values entered in the search parameters. For example, if you are searching for Palmetto LTD, you can enter ‘pal’ in the Organization Name text box and all organizations that contain ‘pal’ in their names are returned. If only one organization meets the search criteria, the organization opens automatically.
- Organization name is an easily-understood name used to recognize the organization. Users enter the organization name when logging in to Identity Access Management
- Organization ID is a unique identifier for the organization in Identity Access Management.
Identity Access Management provides an Enabled check box, to enable or disable access to the organization. This is useful if you need to prevent users from logging into Identity Access Management for a period of time for some reason, such as to update organizational information.
Note: Disabling an organization also disables all user accounts in the organization. However, if you enable the organization again after disabling it, you will need to enable each user account again.
Customers can optionally upload a logo to display in the System Details section accessible from each page. The logo must be:
- A .jpg, .bmp, .png, or .gif file
- Less than 20 kb
Some partner applications require specific attributes at the organization level and the user level to link to their applications. The organization level attributes must be added manually, and the attribute names must be entered exactly as the information is set up in the partner applications, including capitalization and spacing. For more information, see About Attributes.
Assign organization-level and user-level attributes in the following order:
- Add organization-level attributes to the organization when the organization is set up.
- Add the partner application to the organization.
- Add the partner application to a role in the organization.
- Assign the role to a user account and enter the user-level attributes.
Caution: If you don't assign the organization-level attributes for the partner application, the icon for the partner application will appear on the Home page, but no users will be able to access the partner application.
Note: User attributes for HR/Payroll Latitude users are provisioned into IAM if the customer uses automatic provisioning. In rare cases, two users may have the same user ID, which is based on the user's employee clock number, employee flxID, or employee number. Duplicate user IDs will cause a provisioning exception that you will need to resolve.
The user account that is created when you add the organization is the first user in the organization, and is the first user assigned the IAM Customer Admin role responsibilities for the organization, by default. The IAM Customer Admin has the ability to create other user accounts, roles, and assign data items to users within the organization.
When you set up this user account, make sure that Send Welcome Email is selected in the User Account Reset section. IAM sends the user an email with the required information for the user to log in.
This user logs in with the account name set up on this page.
- To add and manage users, including assigning roles, click Users.
- To add partner applications for the organization, click Customer Partner Profile.
- To manage data profiles and data items or PSIDs, click Data Profile.
- To manage user provisioning, click User Provisioning.
- To review provisioning exceptions, click Provisioning Exceptions.
- Search for an organization by clicking Search on the Home page or the menu and then, on the Organizations tab, entering or selecting one or more of the following parameters:
- All or part of the organization ID code
- All or part of the organization name
- All or part of theFinance ID
- Organization status (Active, Inactive, or All)
- PSID
- FEIN
- PSID/FEIN Description
- PSID/FEN Status
- Enabled – This option searches only for organizations that have enabled data items. If the organization has no enabled data items, no results are returned.
- Disabled – This option searches only for organizations that have disabled data items. If the organization has no disabled data items, no results are returned.
- All – This option searches for all organizations with enabled, disabled, or no data items. This option is selected by default.
- Once you have entered the search parameters, click Apply Filter to search.
- Select the organization from the search results.
Your user role definition determines the organizations that you can see in search results. You can access only the organizations for the role to which your user account is assigned. For example, users with the IAM Customer Admin role can access information in only that organization. Users with the IAM Dayforce Admin role can access information for multiple organizations.
Note: The search returns organizations that match the values entered in the search parameters. For example, if you are searching for Palmetto LTD, you can enter ‘pal’ in the Organization Name text box and all organizations that contain ‘pal’ in their names are returned. If only one organization meets the search criteria, the organization opens automatically.
- Open the Search Organizations page as described in Search.
- Click Add a New Organization.
- In the New Organization pop-up window, select the organization type.
- Enter the organization name. This is the name customers enter as the Organization ID when they log in.
- Enter the organization ID. This is an internal identifier for the customer.
No special characters are allowed in this field except a hyphen. - Select the authentication type.
- Select the account linking type.
- Enter the Finance ID.
- In the Default URL for WelcomeLetter list, select the default welcome letter to be sent for your organization.
- If you want to upload a client logo to replace the Dayforce logo displayed on the user's profile, click Browse.
- Navigate to the logo file, select it, and click Open.
- Select Send Event Update Email To All Users if you want to send email updates to all users when changes are made to the organization.
- In the MFA Configuration panel, you can enable Multifactor Authentication (MFA) and configure the following MFA options for the organization:
- Mutli Factor Authentication – enables multifactor authentication when selected and enables all MFA options on the page for selection
- Access IAM when MFA provider is unavailable – when selected, allows users to access IAM when the Authy service is unavailable to verify users
- Allow VOIP Phone Numbers – when selected, allows voice over IP telephone numbers to be used for multifactor authentication
- Days to Remember Users – A value from 0 to 30 is allowed. A value from 1 to 30 allows the user to login to IAM without verifying their identity if they have done so within the configured number of days. 0 disables this option, requiring users to verify their identity every time they login. The default value is 1.
- IAM Roles – when selected, enables MFA for the Client Admin, Client User roles or both; both options cannot be blank, one role must be selected
- If you require any other attributes, in the Attributes section, click Add.
- Enter the attribute name and value.
- Add any other customer-level attributes.
- Click Save.
- Do one of the following:
- If you have access to multiple organizations, search for and select an organization.
- If you have access to only one organization, on the Home page, click Administration > Organizations.
- In the Attributes section on the Organization Details page, do one of the following:
- Click Add, and then enter the attribute name and value.
- Click the attribute you want to edit, and then change the attribute name or value.
- Click Save.
- Do one of the following:
- If you have access to multiple organizations, search for and select an organization.
- If you have access to only one organization, on the Home page, click Administration> Organizations.
- In the Security Policy section on the Organization Details page, select new values for any of the security policy parameters you want to change.
- Click Save.
- Open the Search Organizations page as described in Search.
- Select the organization.
- On the Organization Details page, clear the Enabled check box.
A message appears asking you to confirm the action and stating that all users for the organization will be disabled.
- Click OK to disable the organization and the organization's users.
- Click Save.