Adding local users to IBM Security Verify

Add IBM Spectrum Control users (local users) to the Cloud Directory in IBM Security Verify. This task is done by your system, network, or IBM Spectrum Control administrator.

About this task

Important: You must add users to IBM Security Verify before you enable multifactor in IBM Spectrum Control. Any IBM Spectrum Control users that are not added will be unable to log in after multifactor authentication is enabled.

Procedure

To add local users to the Cloud Directory in IBM Security Verify, complete the following steps:

  1. Access the IBM Security Verify administrator dashboard by entering the following URL in a web browser:
    https://tenant.verify.ibm.com/ui/admin

    Where tenant is the name that you specified when you created your subscription. Usually this name is associated with your company or organization, such as bankxyz. For example, https://bankxyz.verify.ibm.com/ui/admin.

  2. Select Directory > Users & groups.
  3. On the Users & groups page, click Add user.
  4. On the Add user page, enter the following information:
    Identity provider
    Select Cloud Directory.
    Basic user profile
    Enter the given name, middle name, and surname for the local user.
    Username
    Enter the username that the user uses to log in to IBM Spectrum Control.
    User information
    Ensure to include an email address for the user. Each user receives instructions on login to IBM Security Verify which provides step-by-step instructions on selecting second-factors for the user's profile.
  5. Click Save.
  6. Repeat steps 1-5 for all local users that are defined in IBM Spectrum Control.
    Important: After you add all the local users to IBM Security Verify, you must then add them to the admin group. Users must be in the admin group to select the second factor of authentication that they want to use.
  7. On the Users & groups page, click the Groups tab.
  8. Select admin and click Edit.
  9. On the Edit group page, click Add.
  10. In the search field, enter the name of an IBM Spectrum Control user.
  11. In search results, select the user and click Select.
    The user is moved to Selected users & groups.
  12. Repeat steps 10-11 for all IBM Spectrum Control local users.
  13. Click Done.
  14. On the Edit group page, click Save.

What to do next

Depending on your security requirements, you can either require only a certain type of second factor or let users select from the supported list of available factors when they log in for the first time. If you want to control which factors and their settings users can specify, select Security from the IBM Security Verify administrator dashboard.

After you have added all users to IBM Security Verify, each user receives an email notification with instructions on setting up the second factors for their account. When these users log in to IBM Spectrum Control, they are directed to IBM Security Verify to present the second factor.