Manage identity policies, branding and user self-service capabilities

Manage Identity Proofing

1. In the left navigation pane, select Applications. Alternatively, you can select View Applications tile on the Dashboard.
2. Select the application you want to configure.
3. Go to the Policy tile and click View & Update.
   Define Identity Matching:
   
4. Under the Identity proofing tab, perform the following steps:
   1. Match Type. Select one of the following options based on the application’s registration experience:
      • Optional – Select this option when identity matching is not mandatory during initial registration. This is applicable when user registers as Guest and may later choose to upgrade (step-up) to a member account, where it identifies the golden record and checks eligibility during this transition. Use this setting for applications that support a hybrid experience, where user can register as a Guest and later step-up to member.
        Note: This option is selected by default for HSID applications.
      • Required – Select this option to enforce identity matching as a mandatory step, requiring a successful golden record match to proceed with user registration. .
        Note: Use this setting for applications that support a Member-only (matched) experience.
      • None – Select this option if the application does not require identity matching. Use this setting for applications that support a non-member (unmatched) experience, where users can register and gain access without meeting any eligibility criteria.
        Note: This option is selected by default for OHID applications.
   2. Match preference: The Smart Match option is selected by default. It checks key user attributes–such as First Name, Last Name, Date of Birth, and known identifier–to find matching golden records in the EiMP. The system performs a smart match, supporting more than 20 identifiers.
   3. Wildcard length: By default, the smart match supports the first 9 digits for the EiMP check.
      Note: Wildcard search is a configurable smart search logic that enables partial or complete identifier matching, handling leading zeros, non-alphanumeric characters, spaces, and various other formats.
   4. Max length:Enter the value to limit the maximum number of characters to be considered for a match. The default value is set to 30.
   5. Identifier Step-up: Enable this option to prompt users to enter their identification number during every login attempt, ensuring consistent identity verification and supporting secure access to the application.
5. Click Save.

Set password policies

Manage authentication & registration policies

1. In the left navigation pane, select Applications. Alternatively, you can select View Applications tile on the Dashboard.
2. Select the application you want to configure.
3. Navigate to the Policy tile and click View & Update.
4. Under Access policies tab, you can, configure authentication policies, configure registration policies, and configure COPPA compliance settings.
   1. To configure authentication policies:
      
      1. Re-authentication: Select this option if users need to verify their identity again before accessing sensitive features or data.
      2. Manage profile SSO: Select this option to enable users to manage their profiles without the need of reauthenticating.
      3. Session detection: Enable this setting to detect and manage active sessions in the user’s browser. This helps prevent duplicate logins and unauthorized session access.
      4. RBA reassess: Select this option if you want to reassess the user’s risk level during an authentication attempt. This requires Risk-Based Authentication to be enabled.
      5. Universal sign out: Select this option if you want to log out of multiple applications and services with the single sign-on.
   2. To configure registration policies:
      1. Unique email address: Select this option to prevent multiple accounts from using the same email address.
      2. 
         Note: For OHID applications, it is recommended to enable the unique email address.
      3. Unique phone number: Select this option if each user must have a distinct phone number.
      4. Mandatory phone number: Requires user to provide a phone number during registration.
      5. Username change: Allows user to update their username after registration.
      6. Voice call: Enables phone call verification during the authentication process.
      7. Show user consent prompt: Displays a consent prompt during registration or login to collect user consent.
      8. Date of birth: Requires user to provide a date of birth during the registration process.
         Note: For OHID applications, it is recommended to enable the Date of birth.
      9. Enforce email verification: Requires the user to verify the email provided during registration.
         Note: For OHID applications, this field is not applicable.
      10. Bypass step-up for email users: Disables the additional verification steps for users signing with email only.
   3. COPPA compliance settings: Protects the privacy of children under 13 by requiring parental consent and limiting data collection.
      1. COPPA restriction: Never disable the COPPA (Children's Online Privacy Protection Act) Compliance. This field enforces restrictions to prevent users under age 13 from registration, as required by COPPA regulations.
         Note: This is a federal legal requirement that prohibits access to your platform by users under the age of 13. Non-compliance can result in substantial financial penalties for each violation.
         
      2. COPPA consent: Requires verified parental consent for users under 13 to access the portal.
      3. Legal review: If an application chooses not to enforce COPPA, it must first consult with legal counsel. A formal written statement from legal counsel, explicitly authorizing the bypass of COPPA, must be submitted to us. This is the only acceptable condition under which COPPA enforcement may be bypassed.
5. Click Save.

1. In the left navigation pane, select Applications. Alternatively, you can select View Applications tile on the Dashboard.
2. Select the application you want to configure.
3. Navigate to the Branding & customization tile and click View & Update.
4. Go to the Branding section and configure the following fields:
   
   1. UI Experience Template: Select the UI template from the dropdown menu to configure the appearance of the sign-in screen.
   2. Theme: HSID
   3. Content source: By default, all custom content is sourced from AEM.
   4. Sync AEM content to S3: If you want to sync the content after your changes, click Sync now.
   5. Application logo: Click Select file or drag a logo into the upload area. Use the file formats: .png, .jpeg, .gif, .svg and keep the file size under 1 MB.
      Note: If you do not provide a logo, the application will display the tenant’s logo by default
5. To configure banner message on the sign-in screen, enter a message in the provided text editor.
   Note: If you do not provide a logo, the application will display the tenant’s logo by default.
6. To configure alert message (Pop-up notification),
   1. Alert header: Add a short, descriptive title such as “Important Update” or “Action Required.
   2. Alert message: Use the rich text editor to write the full message.
      Note: Use alert messages to notify users of critical issues or policy reminders. The platform displays these messages as a pop-up after the user lands on the sign-in page
7. Click Save to apply changes.

1. In the left navigation pane, select Applications. Alternatively, you can select View Applications tile on the Dashboard.
2. Select the application you want to configure.
3. Navigate to the Branding & customization tile and click View & Update.
   
4. Select Theme > Custom to upload a stylesheet for your application.
   To upload a custom theme:
   1. Click Download sample CSS template to review the structure.
   2. Click Select file or drag your .css file into the custom theme box.
      Note: Ensure the file is under 1 MB and uses the .css extension.
   3. Application logo: Click Select file or drag a logo into the upload area. Use the file formats: .png, .jpeg, .gif, .svg and keep the file size under 1 MB.
      Note: If you do not provide a logo, the application will display the tenant’s logo by default
5. To configure banner message on the sign-in screen, enter a message in the provided text editor.
   Note: Use the banner message to display a persistent message, such as scheduled maintenance or a welcome message, at the top of the application’s sign-in screen.
6. To configure alert message (Pop-up notification),
   1. Alert header: Add a short, descriptive title such as “Important Update” or “Action Required”.
   2. Alert message: Use the rich text editor to write the full message.
      Note: Use alert messages to notify users of critical issues or policy reminders. The platform displays these messages as a pop-up after the user lands on the sign-in page.
7. Click Save to apply changes.

Manage user self-service settings

1. In the left navigation pane, select Applications. Alternatively, you can select View Applications tile on the Dashboard.
2. Select the application you want to configure.
3. Navigate to the Branding & customization tile and click View & Update.
4. Click Customization tab.
   
5. Create account: To allow users to create their own accounts, toggle on the Account creation setting.
6. Manage account: To let users update personal details such as name or email address, toggle on the Account management setting.
7. Recover account: To enable password resets and account recovery, toggle on the Account recovery setting.
   Note: The Recover account setting is not available for the OHID applications.
8. Include account activation link in email: To send an activation link in the welcome email, toggle on the Email activation link setting.
9. Click Save to save changes.