Skip to main content

Add a Tenant Account

You can add tenants in Production mode or Trial mode. Trial accounts are valid for only 30 days. If your Service Provider account is a Trial account, you can only add Trial Tenant accounts. Partner Service Provider accounts can create Standard Service Provider tenants.

Note: There are two types of Managed Service Providers (MSPs) that can be created:

  • ID Cloud – Issuance (Includes designers and full access)
  • ID Cloud – API (Includes Basic print API – These are APIs that don’t use designers and Smart Card provided by Instant ID as a Service)
     
  1. Log in to a Service Provider Tenant account.
  2. Select Main Menu > Service Provider > Tenants. The Tenants List page opens.
  3. Click Add . The Add Tenant page opens.
  4. Enter the Contact Information, as follows:
    1. Enter the user's first name in the First Name field.
    2. Enter the user's last name in the Last Name field.
    3. Enter a user ID in the User ID field. The user uses the User ID log in to Instant ID as a Service.Tip: Record this User ID in a separate location so that the user can reference it when logging in to the account.
    4. Enter the user's email address in the Email field. Instant sends OTP authentication emails the e-mail address.
    5. Enter a mobile phone number including country code and area code in the Mobile field. Note: The Mobile number you enter is the number that receives any One-Time Passwords (OTPs) generated by Instant ID as a Service for authentication purposes. The user can set up to use other authenticators after logging in for the first time. However, they must use OTP to log in for the first time. If Instant ID as a Service cannot connect with the mobile number entered, the OTP is sent to the user's email address.
  5. Enter the information for the user's company in the Company Information area as follows:
    1. Enter the user's company name in the Company Name field. Enter name of the company or team that will manage the tenant account
    2. From the Company Country list, select the country where the company creating this Instant ID as a Service account is located.
    3. If you select Canada or the United States, select a state or province from the Company Province/State list.
  6. Enter the Account Information, as follows:
    1. In the Account URL field, enter a custom domain name. The value entered is combined with the hosted region of the Service Provider account to create a custom URL. For example, an account with the domain name "example" created by a Service Provider account in the United States would generate the custom URL example.us.trustedauth.com.
    2. Select Issuance from the By default, the Account Type list.
  7. For Partner Service Provider accounts, select Promote to Service Provider to create the tenant as a Standard Service Provider.
  8. Click Next. The Tenant Details page appears.
  9. Enter the Contract Information:
    1. From the Contract Mode list, select Trial or Production.
    2. In the Contract Number field, enter the contract number for the tenant. This is determined by Entrust when MSPs are created. The values from an MSP are retained for tenants/resellers.
    3. In the Customer ID field, enter the ID for the customer.
    4. In the Entitlement ID field, enter the number used to identify the entitlements for the customer.
  10. (Optional) Enable a self-signed certificate. Note: Self-signed certificates may be needed when an Entrust Manufacturing Certificate Authority does not exist for a printer. In this case, existing certificates can be leveraged. The Cloud Ready Utility can be used to obtain the self-signed certificates. Users are responsible for any certificates they provide to Entrust. Trust for the certificate is limited to a given tenant. If the printer is deleted from the tenant, the certificate trust for that self-signed certificate is also deleted.
    1. Under the Printer Certificate heading, select the Enable self-signed printer certificate check box to enable the feature for a tenant or service provider.
    2. Complete the certificate details fields, including entering the User Quantity, Issuance Quantity, Mobile Flash Pass Claims Quantity (if using mobile flash pass), and the Start Date and End Date of the certificate.
  11. From the Adaptive Issuance Cloud Bundles list, select an entitlements bundle.
    • Essentials: Limits Instant ID as a Service features and allows users to create only 15 users and 15 credential designs.
    • Enterprise: Allows users to register webhooks for tenants, sending automatic notifications to specified endpoints when enrollments are created, updated, or deleted. Enterprise can access webhooks through Instant ID as a Service or via API. For information on webhook APIs, refer to the Entrust Instant ID as a Service Issuance API Administration Guide. Trial users are allowed 50 Enterprise-enabled tenants and Production users are allowed 1000.
    • Advanced: Includes Magnetic stripe in Credential Designer and does not limit credential designs.
    • Professional: Includes Smart Card and External database features.
    • IIDaaS Ribbon: IIDaaS Ribbon is an optional entitlement bundle that allows Managed Service Providers (MSPs) to enable IIDaaS permissions through a ribbon supply, without using annual subscriptions or per-credential charges.
      Once the IIDaaS Ribbon entitlement is enabled for an MSP, they have the option to enable it for tenants/end customers. MSPs wont be billed for tenants that are enrolled in with the IIDaaS Ribbon entitlement. Printing is possible as long as the ribbon is correctly onboarded with the corresponding bundle (the bundle assigned during a tenant creation should match the ribbon entitlement bundle).
      Note: MSPs must enable the Enable IIDaaS Ribbon check box for tenants using IIDaaS Ribbon. This allows tenants to use credits while issuing a mobile flash pass. Tenants can view the amount and expiration time of their credits by navigating to Home > Mobile Flash Pass and viewing the Mobile Flash Pass Credits section.
      Note: MSPs can enable the IIDaaS Ribbon for a tenant at any time by clicking the Enable IIDaaS Ribbon check box. The tenant must select their purchased cloud bundle from the Adaptive Issuance Cloud Bundles drop down menu before checking the Enable IIDaaS Ribbon check box.
    • Fleet Management as a Service (FMaaS): Allows root account users to create MSP tenants.
      Note: Once an MSP with the FMaaS counter name is created, Instant ID as a Service allows printer status information to be visible for each opted-in tenant/reseller. Select an opted-in tenant/reseller from the Tenants drop-down menu under Home > Printer List to view printer status information.
    • Mobile Flash Pass: Tenants who select this counter name can send Mobile Flash Passes.
    • Printer: Tenants can track the total number of printers for tenants/resellers.
       
  12. Click Next. The Entitlements Details page appears.
  13. Review the details and then click Add.

The Tenant Account is created and appears on the Tenants List page. The Contract Mode lists whether the account is a Trial or Production account. The tenant also receives an email with information about their account.

Add an Entrust-Managed IIDaaS Account​

Entrust-Managed IIDaaS Accounts can be added under an Entrust MSP. Navigate to Entrust.com to set up a new Entrust-Managed IIDaaS Account Instant ID as Service account. For customer support needs, visit the Support Resources page and submit an email in the Contact Entrust Support section.

Note: Entrust-Managed IIDaaS Accounts are automatically enlisted in the IIDaaS Ribbon, Advanced, and Fleet Management as a Service (FMaaS) entitlement bundles. For more information on Instant ID as a Service entitlement bundles, refer to Add a Tenant Account.

Note: Entrust-Managed IIDaaS Accounts will not have access to the Credentials, Credential Designer, and Enrollment Designer menu items in the dashboard until the Entrust-Managed IIDaaS Account adds a ribbon supply with the same Instant ID as a Service entitlements to a cloud-enabled printer. Refer to "Instant ID as a Service Dashboard" in the Instant ID as a Service Online Help for more information on using the Instant ID as a Service dashboard.

Note: Entrust-Managed IIDaaS Accounts are automatically opted in to FMaaS until a Entrust Datacard printer is onboarded with IIDaaS Ribbon with Advanced bundle. Refer to "View Printers with Fleet Management as a Service" in the Instant ID as a Service Online Help for instructions on opting in or out of FMaaS.

Note: Terms of Service notifications do not appear upon initial login for Entrust-Managed IIDaaS Accounts.