• Replies 2 replies
  • Subscribers 136 subscribers
  • Views 924 views
  • Users 0 members are here
Options
Related

In KC, how does one pull a report of users and their last login date?

Sarai Ezzell

I'm doing account cleanup and I need to clear out abandoned accounts. The only process I've managed to figure out is VERY MANUAL and it seems like this should be automated. I want a solution that doesn't require hiring a developer. 
Rate translation
×
Suggest better translation
×
Parents
  • Hi Sarai - this isn't exactly answering your question, but I would be careful how you "clear out" abandoned accounts. We don't delete accounts, we deactivate them. Here are the instructions for that. Hopefully SDL can find a way to help you automate this...
    ---
    When a writer leaves FICO, switches to another department, or otherwise no longer needs to use the system, an LCA administrator should deactivate the writer’s CMS account to shorten the list of users that appear when assigning work. In the web interface:
    1 In the Settings tab of the LCA web interface, select Users in the navigation pane.
    2 Select the user that you want to deactivate.
    3 Click the Properties icon.
    4 Clear the Active check box.
    5 Click OK to save your changes.
  • in reply to Elizabeth Gschwind

    Thanks Elisabeth - I would also advise to toggle the Disabled check box on the user profile as well, that makes the user profile unusable for a user profile lookup at login time.

    Depending on the version of the software in question, there are multiple ways to do authentication, roughly they come down to either:

    • External Authentication, so you provide your domain credentials or work accounts to a Secure Token Service. STS brands like Microsoft ADFS or PingIdentity or anyone that confirms to the OASIS standards we support.
    • Internal Authentication, perhaps more the backward compatible option where you make the Content Management system responsible for the username/password authentication. Typically the flow also goes over a Secure Token Service, same standards, but we provide it with the software typically named InfoShareSTS or ISHSTS.

    Once you are authenticated, then a Content Management user profile lookup will happen as that will provide the necessary Authorization to the logged in user providing UserRoles and UserGroups. Do note that if you used External Authentication, that a disabled domain account, would not never allow a user profile hit anyway.

    In general we think that the user profiles are part of a historical database and true deletion is not advised. I hope this clarifies the generics, and get you going as we are missing some details in the initial question.
Reply
  • in reply to Elizabeth Gschwind

    Thanks Elisabeth - I would also advise to toggle the Disabled check box on the user profile as well, that makes the user profile unusable for a user profile lookup at login time.

    Depending on the version of the software in question, there are multiple ways to do authentication, roughly they come down to either:

    • External Authentication, so you provide your domain credentials or work accounts to a Secure Token Service. STS brands like Microsoft ADFS or PingIdentity or anyone that confirms to the OASIS standards we support.
    • Internal Authentication, perhaps more the backward compatible option where you make the Content Management system responsible for the username/password authentication. Typically the flow also goes over a Secure Token Service, same standards, but we provide it with the software typically named InfoShareSTS or ISHSTS.

    Once you are authenticated, then a Content Management user profile lookup will happen as that will provide the necessary Authorization to the logged in user providing UserRoles and UserGroups. Do note that if you used External Authentication, that a disabled domain account, would not never allow a user profile hit anyway.

    In general we think that the user profiles are part of a historical database and true deletion is not advised. I hope this clarifies the generics, and get you going as we are missing some details in the initial question.
Children
No Data