Open the following URL:

https://<hostname>/ipa/ui

where <hostname> is the fully-qualified hostname for the LDAP primary host, usually the "idp1" server

Enter the custadmin user credentials and click the [Login] button

 The Active Users page is displayed.  To add a new user, click the [+Add] button

 Enter the desired user login (userid), First Name, Last Name and (temporary) password information, then click the [Add] or [Add and Add Another] button, or [Cancel] to abort.

NOTE:  You need to enter a temporary password here.  A password is required so that the new user can login and set their final password.

The password provided here must be changed at the first login for the userid.

 NOTE:  If no password is entered in the window above, you will need to contact the Managed Support team to set a temporary password for the new userid.  The custadmin user cannot alter the password of an already-existing user.

 After clicking the [Add] button, the new userid has been created and is now displayed in the Active Users page.

At this point, the new user has been created and custadmin can either create another user or logout of the IdM UI.

Updating the Password for the New User

 The new user must login to FreeIPA in order to set its final password.  Any password set by the custadmin user is temporary and must be changed at first login.

The new userid can login to the same URL in order to set its final password.

 The user will be prompted to enter the existing (temporary) password and a new password.  After doing so, click the [Reset Password and Login] button to accept the new password, or [Cancel] to abort the change.

The user's settings page is displayed.  Here they can update their own information or change their password.

Limitations

• The custadmin user can only create new users
• The custadmin user cannot create new groups.  Please contact Managed Support for assistance
• The custadmin user can only set a temporary password when creating a new user.  Custadmin cannot change/reset passwords for existing users.  Please contact Managed Support for assistance
• The custadmin user cannot add new users to a group.  Please contact Managed Support for assistance
• The custadmin user cannot delete existing users.  Please contact Managed Support for assistance