User Access - Help
Background: Our Group has 50,000+ users across 3000 companies.
Scenario: Users, on their own schedule will want the ability to access a form in Archer that allows them to raise a Vendor Profile Request.
Problem: We cannot allow all users access to Archer (Not Manageable). We played with the idea of having specific users from each company nominated as the user who can raise requests on that companies behalf - feedback from the company is this is too much work for that one user.
Now we are stuck trying to come up with ways to tackle this problem. How do we get users into the system in a way that makes the process user-friendly - we don't want users having to raise access requests, wait until it's provisioned then go back in and raise a vendor request.
All ideas welcome.
If all of those users happen to be in the same user directory, you can leverage the auto-provisioning feature of Archer. This is done by configuring an LDAP Sync with your user directory and enabling Single Sign-On. Then, when a user in the directory, but who doesn't yet have an Archer account, attempts to SSO to Archer, the platform will query the directory, see they are valid, and generate a basic user account for them automatically.
The downside to this is that your Vendor Profile Request application will need to be accessible to the Everyone Group, as this is the only Group/Role structure an auto-provisioned user is placed into on creation.