Controller Profiles

When defined correctly, Profiles can make enrollment a smooth process. Profiles work closely together with several processes within our management system. In coherence with our Business Rules, it defines specifically for each profile what can or cannot be done, or what is reported to third-party back-office systems like access control. Profiles are also used in combination with credentials types. In our system, a person can have multiple Credential Types. For example, a physical and a digital ID. It is important that during the enrollment these 3rd party systems are informed correctly so that the person has, for example, access to the building when the ID is activated.

You can also directly connect a template/card design to the profile. Currently, this is only supported for our Press production application and the HID® Fargo Connect™ Add-In. The selected template will be automatically used during the production process.

Add Profile

To add a Profile, click on the + button in the top right, indicated below.

The Add a Profile window will open on the right. Give the Profile a logical name like Student or Employee, but you can make it as specific as is needed, for example, Doctor or Administrator, etc. Keep in mind that the more profiles you have, the more complex workflow processes become.

New profiles require a Name* to start with; the rest are options to further customize how the Profile is used in the system.

Payment - Select a Payment account for the Profile. Cards issued under this profile will be produced under the selected payment account.

Use Custom Provider Key - Enable for use in SSO Provider keys. Attach the SSO to the Profile and allow SSO users to sign in to Stand using the Profile’s email address that matches the SSO email address.

Login Provider* - Enter the name of the Login Provider
Provider Key Field - Select the Key field in Controller to match the provider keys with the SSO
Provider Key Handling* - Select how to handle keys in the case of duplicate provider keys:
- Fail - Do not create a new user, but return the status code “Bad Request” with the reason “The custom provider key is already taken by another user.”
- Steal - Create a new user, unlink the provider key from the existing user, and register it for the new one.
- Connect - Do not create a new user, but reuse the existing one for the current registration.

Photo Required to Create Credential** - Enable to restrict creating new cards under the Profile without a Person Photo.

Photo Required for Production Approval - Enable to restrict approving new cards for Production without a Person Photo.

Signature Required - Enable this option to request Stand users to upload a Signature to verify their identity before viewing their Digital IDs.

Identity Required - Enable this option to request Stand users to upload an Identification Document (State-issued ID, passport, verification, etc.) before viewing their Digital IDs.

Self Service Access - Enable this option to allow Users with this Profile to access the self-service Stand application using the provided email.

When enabled, the system will begin to send out Welcome emails to users with an email added to their Profile.
Enabling this option after the profile has been created will request the Admin to confirm if any existing Users with the Profile should retroactively be granted Stand access. If denied, only Persons with the Profile added after being enabled will receive Stand access.

Anonymous - Enabling this option allows for the creation of Temporary credentials in Controller. Temporary credentials can be attached to existing cardholders.

****** Required to Save*

******* Will prevent credentials from being created manually and automatically*

Edit Profile

All created profiles can be edited by clicking on the Pencil icon to the right of the Profile, indicated below.

Update the information about the Profile, then click on Save to store your changes, or Cancel to discard changes, and return to the Profile Overview.

Delete Profile

When deleting profiles, please be aware that profiles can also be incorporated with created business rules. Deleting a profile can only be done when it is not connected to any business rule. Remove the profile from all active business rules to be able to delete the profile.

You will be prompted with a message asking if you are sure you would like to delete the profile. Click on Yes to delete the Profile, or click on No to cancel the delete operation, and return to the Profile Overview.