Introduction
Before a user can log into itris they will need both an itris user account (see the User Management | Users article) and an itris Id account.
A user can be invited to create an itris Id account when their itris user account is created, or sign up at any time (including prior to their itris account being created) via the itris Id Portal at https://id.itris.co.uk/. It is important that the email address used for the itris user account and itris Id Portal account match.
If a user accesses more than one itris database they will require user accounts for each of these, however, assuming they are all under the same user name/email address then only the one itris Id account is required.
When logging in itris will talk to the itris Id Portal to authenticate i users. Operating in this manner has a number of security benefits including:
- users are the only ones to know what their password is,
- users can reset their password if forgotten,
- provides enhanced protection against brute force attacks,
- multi-factor authentication offers an additional security layer.
Sign Up
When signing up the following are required fields: Name, Email address and Password.
The Password must be a minimum of 8 characters in length and at least a moderate strength.
First Log in & Verification
At first log in the user will be required to verify the account.
A user will still be able to log into the itris Id Portal and will see there that they have not yet verified. However, they won’t be able to log into itris until the Id Portal account is verified.
The verification email will contain a link for the user to click on to verify their email address.
Subsequent Log Ins
Once an itris Id Portal account is created, on the Sign In page user have the options to generate an email to reset their password. Additionally there is the option to
Logging in with 2-Step Verification
If 2-Step Verification is enabled (see the 2-Step Verification section below), once the users has entered their email address and password they will be required to generate a verification code in their chosen Authenticator app to complete their log in to the itris Id Portal.
Dashboard
From the itris Id Portal Account users can change their name, email address and password.
If a user changes their email address in the itris Id Portal, they will need to log into itris with the new address, in turn this will update the users itris email/user name in the itris Management Utility (IMU). However, if a users name changes, this will need to be updated in both the itris Id Portal and the IMU separately.
When changing their password, users will need to log out of itris and back in with the new password, failure to do so will see their session automatically terminated after a maximum of 1-hour.
Profile Menu
Via the Profile menu in the top right users can log out of the itris Id Portal.
Delete my Account will delete the itris Id Portal Account only, it will not delete the itris user account.
2-Step Verification
2-Step Verification, often referred to as 2 Factor Authentication or 2FA, adds additional security to the itris sign in.
When logging in to an itris database and the itris Id Portal where 2-Step Verification is enabled, in addition to their email address and password, a user will be required to enter a code that is generated by an authenticator app. Examples of Authenticator apps include, but are not limited to, Authy, Google Authenticator and Microsoft Authenticator.
2-Step Verification can be enabled at a database level via the itris Management Utility Settings area (see the article Settings | General Settings for more information), or a user can enable for themselves via their itris id Portal account.
To use 2-Step Verification a user will need access to an authenticator app on a smartphone so that the QR code can be scanned, upon which the app will generate a 6 digit code to be added to the itris Id portal. This tells itris which app to use going forward to generate the 2-Step Verification codes used for logging into the itris application and the itris Id Portal.
Once set up the user will receive an confirmation email to this effect.
For more details in logging into itris with 2-Step Verification enabled please see the article itris Launcher | Log in.
It is important to note that if 2-step verification is enabled and a user looses their device or deletes the authenticator app (meaning they can’t get the an verification code) they won’t be able to turn 2-step verification off. In this scenario please contact itris Support to unlink the users itris Id Portal so that the user can create a new one to link to their itris log in.
Re-Authenticate
There may be a rare occasion where a user needs to Re-Authenticate their itris Id Account, for example they have not logged in for a while and choose to change their password or turn on 2-Step Verification.
Accessing itris Id Portal from itris
A user can easily access and log into their Id Portal by clicking on their name on the Action Bar.