4.8 Requesting a device for a person

You can request a device for a person; for example, a smart card.

You can currently use the MyID Operator Client to request devices where the Card Encoding option in the credential profile is set to any of the following:

Depending on how your MyID system is set up, the person may be able to collect the device themselves (for example, using the Self-Service App), may require their request to be validated by an operator before collection, or may require the assistance of an operator to collect the device through MyID Desktop – MyID provides many issuance models to suit your organization's needs.

The issuance model depends on the configuration of the credential profile used to request the device. For more information, see the Managing credential profiles section in the Administration Guide.

To request a device for a person:

  1. Search for a person, and view their details.

    See section 4.1, Searching for a person for details.

    You can also view a person's details from any form that contains a link to their account.

    For example:

    • Click the link icon on the Full Name field of the View Request form.
    • Click the link icon on the Owner field of the View Device form.

    You can request a device for a person directly from a directory; MyID automatically carries out the import of the person's details into the MyID database as if you had added the person from the directory manually (see section 4.2.2, Adding a person from a directory). Any issues that occur when attempting to import the person's details are displayed on screen when you click SAVE.

  2. Click the Request Device option in the button bar at the bottom of the screen.

    You may have to click the ... option to see any additional available actions.

  3. From the Credential Profile drop-down list, select the credential profile you want to use for the device.

    The credential profiles available depend on the role of the operator and the role of the person for whom you are requesting the device; see the Linking credential profiles to roles section in the Administration Guide.

    It is possible that there may be no credential profiles available for the person; this is most likely to occur when you are requesting a device for a person directly from the directory, and LDAP linked roles and default group roles are not set up; in this case, you are recommended to edit the person's details and manually assign a role that has access to one or more credential profiles.

  4. Optionally, in the Label box, type a label for this request.

    You can use the label to search for the request:

  5. Optionally, set the Maximum Expiry Date.

    This option is available only if the Set expiry date at request option (on the Issuance Processes page of the Operation Settings workflow) is set to Yes.

    The maximum expiry date is the requested date on which the device will expire. You can select any date up to the Maximum credential expiry date specified for the person (see section 4.4.1, Setting the person's status). Note, however, that you cannot exceed the Lifetime setting for the credential profile; if the request is made for a credential to expire on a date six months from now, but the credential profile has a lifetime of 30 days, the device will be issued with a lifetime of 30 days.

    The credential profile can override the Maximum credential expiry date set for the person if the Ignore User Expiry Date option on the credential profile is set.

    Note: If the Expire cards at end of day configuration option (on the Issuance Processes page of the Operation Settings workflow) is set to Yes, the requested date will be 23:59 UTC on the date selected. See the Issuance Processes page (Operation Settings) section in the Administration Guide.

  6. Click SAVE to make the request.