12.3 Importing an additional identity

You can import an additional identity from your directory. You can allow an operator to import an additional identity for another person, or allow a person to import an additional identity for their own account. In both cases, you can set a filter on the LDAP query to restrict the directory entries available to be added as additional identities.

Note: If you have a credential issued to a person that supports additional identities (that is, it has the Issue Additional Identities option selected in the credential profile), and you import an additional identity, if the Automatically create card update jobs when additional identities are modified configuration option (on the Issuance Processes page of the Operation Settings workflow) is set to Yes, a job is created automatically to update the credential.

To import an additional identity:

  1. Search for a person, and view their details.

    See section 4.1, Searching for a person for details.

    You can also view a person's details from any form that contains a link to their account.

    For example:

    • Click the link icon on the Full Name field of the View Request form.
    • Click the link icon on the Owner field of the View Device form.

  2. Click the Import Additional Identity option in the button bar at the bottom of the screen.

    Note: If you are viewing your own record, the button is labeled Import My Additional Identity.

    You may have to click the ... option to see any additional available actions.

  3. If you have more than one directory, select the directory you want to search using the tabs.

  4. Type your search criteria.

    You can search using the following criteria:

    • First Name

    • Last Name

    • Logon

    • Group

  5. Click Search.

    Note: To set up a filter for the results returned from the directory, in the Operation Settings workflow, on the LDAP tab, you can set the following options:

    • Additional Identity LDAP Operator User Filter – set a query filter when importing an additional identity for another person.
    • Additional Identity LDAP Self-Service User Filter – set a query filter when importing an additional identity for your own account.

    For further information, see the Setting up additional identities section in the Administration Guide.

  6. Select the LDAP record you want to import, then click Select.

  7. Select the certificate policy you want to use from the Certificate Policy to be Assigned drop-down list.

    Note: If you have only one certificate policy configured for additional identities, it is selected automatically.

  8. Review the details of the additional identity, then click Save.

    The View Additional Identity screen appears.

    You can access this screen at any time from the Additional Identities tab on the View Person screen.

    From this screen, you can: