At times people make typo mistakes while adding user information, or the details may require update after certain time period. SigningHub therefore allows an enterprise admin to edit/ update their enterprise users' information as required. You can edit user name, their mobile number, job title, and company name. Similarly, you can also change the role of your enterprise user anytime in order to update their system access.

Edit the details of your enterprise user 

  1. Login with your enterprise admin credentials.
  2. Click your profile drop down menu (available at the top right corner).
  3. Click the "Enterprise Settings" option. 
  4. Click the "Users" option from the left menu



  1. Click  against the enterprise user whose details are required to change.
    The "Edit User" dialog will appear, showing name, email ID, assigned role, national ID, mobile number, job title, and company name of the enterprise user.


  1. Edit the enterprise user details as required.
    Since the "Email" field is used as user's SigningHub account ID, therefore it is not editable and is displayed as a read-only field. 

Please note, the "Role" field will only be editable if you have got the Enterprise Users and Enterprise Roles privileges assigned to your role, otherwise it will be displayed as read-only.
If you change the Common Name of a user, their existing certificate will be revoked and a new certificate is generated as per the new Common Name upon signing.


                                                         


       7. Click the "Save" button.
  1. When updating the Country of a user, the updated country will not be reflected in the user's profile and signing details.

Signing Certificates

Business applications can use this service API to add a certificate for Enterprise Users into their Enterprise account.  An enterprise Admin who has permissions to manage enterprise users in this role, can import RAS (Remote Authorization Signing) enabled certificates for signing. Furthermore, the signing certificates appears at signing time (if RAS is enabled under service plan and under intended user's role). The Role dictates things such as allowed signing capacities available to the user. 


  1. SigningHub will provide an option to enterprise admin that will allow to add (import) / update / delete user certificates. Management of certificates will only be limited to those certificates that has been imported by Enterprise admin and not the ones which are generated by system. End user will get all signing certificates added by Enterprise admin or by system. Option will only appear if Enterprise has RAS enabled in service plan other than that Enterprise will not be able to manage user certificates.


Pre-requisite (for Client)

 

1- ADSS

2- Signing Hub Admin > Service Plan

3 - Signing Hub Web > Enterprise > Users
  • Certificates need to be created in ADSS before importing it in SH with RAS enabled.
  • User keys should not be protected with user password and keys should be in HSM and user authentication should be through RAS supported devices.
  1. Service plan should have minimum one signing capacity (that will have ADSS connector).
  2. Service plan should have RAS configured. (if RAS is not configured in service plan then Enterprise Admin will not be able to manage signing capacities)
  1. Enterprise admin can manage certificate (add/delete certificate)

Configuration (Enterprise Settings > Users > Edit User)

Add Signing Capacity:

  • New tab (Signing Capacities) along with Personal Information will be shown under Enterprise Settings > Users > Edit User.



  • Two options will appear, in case user wants to add a certificate, go to Signing Certificates tab.



  • Next window will have information related to Signing Capacities.
  • List will have all signing certificates either added by System or added by enterprise admin.

​Enterprise admin will have option of Add,Update and Delete signing certificates.


  • Three dots will be shown for those certificates that are created by Enterprise where as other certificates will be there for information purpose, Enterprise Admin will not be able to change any thing in system generated certificates.

 


  • In order to add a certificate, the user needs to click on the'+" sign, as shown below:

   


  • Following window will appear, where the user will be able to add capacity name and Certificate Alias.
  • Capacity name should be user-friendly, that could consist of letters and numbers.
  • Capacity name should not be more than 100 characters. 
  • Capacity name should be unique for each user i.e. capacities added by enterprise admin and provided by Service Plan shouldn't match.
  • Capacity Alias should be same as of provided in ADSS.
  • All conditions mentioned above must be fulfilled and needs to be filled by Enterprise Admin only.


  • Press 'Save' and capacity will be added in the list.

                     


Update Signing Capacity 

If you have changed the user role, the respective provisions (within the role) will be provided to the enterprise user. For details, see Manage your user roles. 

 
  1. For an enterprise user to change a user role, they must have the Enterprise Users and Enterprise Roles privileges assigned to their role.
  2. The "Email" field of an enterprise user is used as their SigningHub account ID, therefore it is not editable.
  3. The user name and their certificate name can be the same or different as required.  


See Also