Very happy to have everyone here, folks from all over the place. It’s always a, you know, awesome honor and opportunity to be able to to instruct you guys, whether it’s through here and the training courses. We’ve done a couple of these webinars now, and really happy to see folks, you know, rejoining and, finding value when they go through these courses, right, or these webinars rather. Alongside me, I have Anna, who’s a part of our team. She’ll just be here, making sure logistics run well. Zoom doesn’t just end on us in the middle of the meeting. And then alongside me, also have another member of the solutions architect team. His name is Ali Mallard. And he’ll just be hanging out, checking out the chat, you know, in case you have any questions that drop in the chat as I am going along through the webinar here. K? As we go along, we’ll pause to see what questions anyone has. There’ll also be some polls involved as well, and then pull in the webinar. We’ll end the session. And, again, hopefully, if you find some value here like you found in the previous webinars we’ve done, you know, we’ll do some more. I’m excited to do some more. And I believe there’s also a recording of this afterwards. So if you have any colleagues or coworkers that have not, that weren’t able to attend, it’s no worries. There should be a recording, and I think it’ll actually be uploaded into Addigy Academy in its own little separate section under Addigy Academy. Alright, folks. So up until this point, right, whether you’ve gone through training in ACA, ACE, ACP, primarily most of the time, we’ve been focused on managing the machine and setting configurations for the machine. The idea behind end user management is where we’re scoping to the end user based on specific fields that are filled out on that end user in their identity provider, like job title or department office location. You can use these fields, right, that you can take from your, IDP and create flex policies with these fields in Addigy. Let’s first talk about how to set things up, what do you need, what to look out for, what to avoid, we’ll go from there. Who’s it for? Right? So what’s the agenda? What is end user management primarily for? Why we’re managing people, not just machines? The three pillars, we’re gonna sync, assign, and manage our users. And then we have a live demo as we go along throughout the course. Right? I’ll stop on certain slides just to move things into a real life demonstration so that it’s not just me reading off a ton of text on slides and putting everyone to sleep. Now if you’re here for an afternoon nap, unfortunately, that’s not what this, call is about. Okay? I’m not here to put you guys to sleep just reading off of, only reading off of bullets here. Let’s look at it and see it live. But before we get into it, what exactly is end user management? So it’s built for our MSPs and internal IT teams whose users live in an IDP, an identity provider. Currently, we support Microsoft Intra and Okta. Google is currently not supported. Right? When a person and not the serial number is a natural unit of management. So machines don’t change, but the people do. So let’s say I were to log in to a machine via identity, I would receive settings and configurations specific to my, let’s say, job title or my office location. If I were to log out of that machine and Tim logs into my same machine with his credentials, he’ll receive settings and configurations primarily reserved for Tim. And this is based on certain, facts that we have in Addigy, the end user management facts. Now you have some identity based facts, but they’re not the same, and I’ll show you what I mean. So the idea here is for, if any information were to change in your IDP, such as a role change, right, or any of those values change office location, then instead of you having to manually move the machine in Addigy, it’ll be moved accordingly to those filters that you set in your flex policies. K? And, again, this… The key here is that we are scoping primarily for the user and attributes that are associated to the user versus, focusing on the machine itself. Who is this ideally for? So there’s a right fit and a wrong fit. Right fit. The MSPs and IT teams who are managing your Apple devices assigned to individual employees. Again, we currently support Entra and Okta. You’re managing people and not machines. So what can you do with it? An automatic setup. As soon as an employee logs in, they’ll receive apps and settings that they need based on their department. These settings are obviously personalized. Right? So depending on their, again, job title, maybe solutions architects receive different configurations from, let’s say, sales. Which devices belong to which employees? And you also have a device fact called active, which we can set to false. So whenever you were to maybe delete that user from the IDP or unassign them from the IDP, the machine gets placed into a policy you have that, you know, easily visible. Who is this not for? So if you don’t have an identity provider, then there’s no way to really use this. Right? We need to set the Addigy identity window. We log in through the Addigy identity window. As soon as we log in, it retrieves our information. And based on that information, Addigy pushes, settings accordingly. Alright? So, again, end user management, EUM, depends on the information that comes directly from the identity provider. So if these fields aren’t filled out, then nothing really happens. So you have to make sure in the IDP that these fields are actually filled out. So to summarize this, if you don’t have an IDP, then you’re… More likely can’t use this particular feature. If you do have an IDP, this will allow you to, again, scope for users in particular as opposed to, the machine itself. Right? Any ETA on Google? Currently, I don’t have an ETA. I don’t have any member in the product team on my call here. If I start shouting out dates, I’d probably start getting in trouble. I don’t have any dates, unfortunately. But our… Again, our team is obviously aware that that is something that, admins are… You know, they want, that they’re looking for. K? Does this include finally being able to set mobile config files for a user, specifically apply email settings or calendar settings based on the individual? Does this install the profile on the user accounts, or does it… Yes. You could still deploy system level profiles. So if there’s a system level profile in the policy, right, and the user happens to be in that policy whether, you know, based on office location or employee ID, then it will receive those profiles. Yes. They can still receive system level profiles. Okay? So before we actually move forward, right, what is it that we have to ensure we have configured entirely in Addigy? There’s different ways we can configure this. And one of the things I mentioned about policies is there’s not really a right or wrong way of doing this. K? The right way are… Is just understanding what inheritance is. K? And to answer the question again, you can use, those device facts as fields in your configuration profiles like this. Let me paste… Let me copy and paste a, a little thing here in the in the chat. You can use the syntax. Right? So replace, like, field ID with their employee ID or with their office location, and then you’ll take that field there that I have in the chat, and you’ll add that into a device settings profile for that additional layer of scoping. What do we have to make sure we have enabled? Well, first off, we gotta make sure we got our policies configured in the manner in which we want to, distinguish these machines. Right? Differentiate these machines. Do I plan… Does Alpha Networks plan on, having separate office locations, or maybe they’re just focused on separate teams? Right? There isn’t a right or wrong way. The first thing is establishing that baseline, understanding what is it that your company needs. So let me go to Alpha Networks. First thing we do when we check a policy, especially as an MSP, integrations and settings, and we ensure that this MDM enrollment profile is here so that we can begin enrolling machines. Step two, if we want that identity login, which is what we’ll need, here’s Addigy identity. I selected Microsoft. Right? Now if I go into Entra, I have four separate tabs here that I’ve favorited. These are the primary tabs that you’ll need when you’re working with either end user management or Addigy identity. Your users in your IDP, these are the users that can log in. I’ll try not to zoom in. I’ll try to zoom in just a little bit so I don’t have their personal info out there. The users… These users can log in through Addigy identity. Right? And this is the IDP. This is where they were originally created. When they log in to the machine, they can either sync, with a local user or they can be just a brand new user. You have groups. So maybe you’re interested in assigning machines based on groups. Right? Maybe you want to assign settings if, based on a, you know, a user that’s in training or based on a user that’s in engineering or based on a user that’s in support. Right? You can create groups. And then you have app registrations and enterprise apps. App registrations. Right? App registrations is what you’ll need to create Addigy identity. The identity login, more specifically. K? The identity login. Let me go into here. And you’re getting your client ID. Right? You have three fields that we get. Client ID, tenant ID, and the secret. Right? Client ID, tenant ID, and your client secret, which is generated when you create a certificate… Or, excuse me, when you add a certificate here. Right? And then you have a client secret, below. Right? I think this is a different… I’m using a different, let me just confirm something here. One second. Okay. I think I’m using a different, certificate. But the point is the value is here, and the client secret goes here. Right? Sorry. This is everybody’s favorite part on my presentations is where I go… Where I start, messing up here. So we have these three fields. However, just because we have the identity window filled out and created doesn’t mean we’re ready yet for end user management. There’s a specific setting we need to enable, right, in order for us to actually use this feature. Assign users to devices automatically. Right? You have four methods of enrollment, identity, which primarily for macOS. If you’re using iOS or iPad, it will be through the ADE enrollment. Right? There’s a slide where we’ll cover the four separate enrollments here. But first, we have to make sure we are ready to actually even use the feature. And in order to use it, you need identity, and you need to assign users to devices automatically. This setting needs to be enabled. K. You have your login window, again, for additional customization, personalization. Collect user attribute data. We can see this sort of as, like, legacy, as in this collects some identity facts, but it’s not the facts that we’re gonna use for end user management. In fact, we have a whole new tier of facts we can use now for our flex policy filters. Let me save this. And I’m not ready yet. I want to determine if Alpha Networks is interested again in office locations or maybe they wanna do something like separating sub policies based on the team. So I’ll click new, and I’ll just do solutions to souls. Solutions are protects. Not souls. This is not a… Not what that’s about. Empty policy. Add filters. Add filter. So one of the things we learn in training is we have different feel, values that we have here. And any criteria we set here, whatever criteria we set, if a machine fits that criteria, it will receive those instructions. And we’ve spoken about device fax. We’ve spoken about custom fax and static fields. There’s even identity related fax. But for end user management, if you scroll down just a little bit on this list here, we have what are called user attributes. And these user attributes are pulling from the users. Let me click on my user here that I have. Here’s my user. Edit properties or whatever their properties are right here. Right? So this information, like, their department, they’re in the customer success department. Their job title is solutions architect. Their office location is Miami. If whatever fields are filled out, this information is then brought into Addigy. Right? And then we can take that information, like job title, and say solutions architect. So if a solutions architect were to log in to the machine via identity, they’re gonna receive whatever’s in this policy. And you can add that additional layer of, you know, that additional layer of scoping using that, what I posted in the chat there. The user just replaced field ID with title or groups or display name or roles. Excuse me. And that’s retrieving information directly from the IDP. So I’m gonna save it. We’re gonna enable it. New. We’ll do sales team. Give it a little icon, some color. Select parent, alpha networks, continue, empty policy. Add filters. Add filter. Gonna scroll down to user attributes, and I’m gonna type, select title. Again, that’s the one I choose to select. You have, about 61 options. You have a variety of different options here. So I’m just gonna stick with title, but you can go based on their email. You can go based on even the nickname on the machine. What… If if all these fields filled out, right, if all these fields are filled out, then we retrieve it and bring it into Addigy. Okay? Pager asked a great question. How often does the info update into Addigy from the IDP? I think it depends on the IDP. From my understanding, it’s, from Entra, it’s roughly, like, over… A little over half an hour. Like, thirty to forty minutes is how long it takes. I don’t know if there’s a way to expedite that, but that’s kind of what I’ve read in our documentation. It’s… You… It should be about half an hour or forty minutes or so that it takes for the information in Entra to be pulled in directly to Addigy. Great great question as always, Pedro. And, again, it depends on the the, IDP. I’m not sure if Okta is the same. So, again, here we have a variety of different options here. I’m gonna stick with title, and I’m just gonna do sales. Save. Oh, and by the way, you can always… Don’t forget. Let’s say the user logs out the machine. Right? And they’re no long… It’s no longer a user that’s tied to sales. Machine no longer has to receive whatever’s in this particular sales team policy. And then one last example, new engineering team. Select little icon. Make it very colorful and bright and happy. Select parent. Health for networks. Empty policy. Add filters, add filter, job… Oops. Excuse me. Title. See, remember, if I do identity job title and title, these are different, actually. They look the same, but they’re actually different. Identity job title is not gonna pull, the solutions architect value. Okay? Title is what’s gonna pull solutions architect. So just one of those subtle things to pay attention to. Use title, not identity job title. They are different. Oh, not solutions. Excuse me. Engineering. Right? Unassign, save, save. So Alpha Networks prefers to separate their, you know, their users based on the team, engineering team, sales team, solutions architects. Greenshore maybe does it by office, NYC office. Add some color. Select parent. Greenshore systems. Continue. Empty policy. New. Florida office. Alright. Very well. Let’s let’s let’s specify. Tampa office. New color. Parent, Greenshore. Continue empty. New. And we’ll just do, I know, Dallas office. Icon, some color. Give it a little icon. Select my parent, continue, empty policy. Right? And, again, what filter would I use? I go to filter. Filter. I would scroll down to user attributes. And in this particular up… Example here, Let me see where would it be. Department. Hold on a second. Maybe it’s… There’s an actual office one. Let me double check-in here. Office location. Perhaps this one, you could use office location. I think this one is one where you could actually use office location, and then just type Dallas. Alright? And if a machine is actually in the Dallas office, it’ll receive these options here. I think that’s where we would use that option there because office location right here, I have it set to Miami. Anyway… Alright. So we see two separate hierarchies, and there isn’t a right or wrong way of… You know, we’re not gonna go in here in your onboarding and tell you, no. This this is terrible. This sucks. Leave. Hopefully not. Right? As long as you understand inheritance. Now we have two separate hierarchies. One hierarchy separates their users based on the team they’re on. Another one separates it based on the office. Again, no right or wrong approach here as long as we understand what’s the, the concept of inheritance. Right? So we have the policies configured how we’d like or however the machine… We anticipate the machine, excuse me. We configured our policies how we’d like. Right? We set it up in a way that we’re ready to now start to, enroll machines so they can receive relevant settings. K? So, again, I have to double check alpha networks, integrations and settings, identity, and then I have my three fields. My identity here is filled, and I have create users as administrators. Great. Let’s go back to the slides for a moment. Excuse me. Assign users to devices automatically. Right? You need this setting here enabled. Save. Alright. Deploy. Let’s go back to the slides for a moment. Alright. So let’s go ahead and launch the first poll here. Which identity provider does your organization use today? Give it a moment here. Great question, Eric. So if your login credential, if your login information, whether it’s Okta or or Entra, it does inherit. Right? It will inherit, but it’s only gonna be in that specific hierarchy unless specified by a filter in a flex policy. So the the machine will enroll into, like, the the company, Alpha Networks. The machines in Alpha Networks, it gets baseline Alpha Networks, settings and configurations. And then from there, depending on if they’re solutions architect or they’re in the Dallas office or however you decide to separate them, they’ll receive those specific, settings and configurations. Alright. Awesome. Thanks so much for answering the poll, everyone. So it seems like a majority, are, you know, selected Microsoft Entra, which is great. That’s the example that we’ll use here. K? Also for Okta. Google, again, product team is not on here, so I can’t just be, you know, sharing dates. I don’t have any dates. I promise. I promise. But if I did, I may have shared one possibly. But, anyway, can’t say anything. My my product team will kill me. So if if it’s gonna be supported soon or not, just speak to one of members of our product team, whether it’s Selena or Bryce. I’m sure many of you are familiar with them. They’re great, super knowledgeable. They’ll have a much better answer for you there. K? So let’s, go to the next slide here. Users flow from your IDP via Addigy… Or excuse me, from your IDP to Addigy via SCIM, system for cross domain identity management. Basically, this is what’s bringing the users from your IDP into that end user management, list that we’re gonna see here in a moment. Right? So how do we actually set this up? I’m gonna go into Entra. Here’s Entra. And remember, at least for identity and end user management, you just need these four tabs, users, groups, app registrations, and enterprise apps. Enterprise apps is what you’ll use to create your identity window. Right? And then your, app registrations are what you’ll use to create, the actual connection with what’s called SCIM. K? S c I m, system for cross domain identity management. So I’m gonna do new registration. Where did I click on, by the way? App registrations? Excuse me. Actually, I I take that back. I I mixed those two up. Hold on a second. I think it’s enterprise apps that we need here. That’s what it is. My apologies. So we need enterprise apps. App registrations is for identity. Enterprise apps is for SCIM. Sorry for the confusion there. I just switched these, the last minute. That’s why I got confused there. So I’m gonna click on create my own application. Again, enterprise apps, create your own application, and I’m just gonna call this here alpha networks webinar dash SCIM, s c I m. I’ll select the third option here, integrate any other application you don’t find in the non gallery… In the gallery. Excuse me. And I’ll click create. Give it a moment here. Let it do its thing. Alright. So there is the initial SCIM connection. Right? But first, before I can actually move forward, let me go ahead and click on… Let me check provisioning real quick. Alright. So we’re gonna click provision… Excuse me, provisioning for us to provision our users. So I’ll create a new configuration under provisioning. And here, it’s asking for two values here, a tenant URL and a secret token. Where do we get that? That’s where we get… Those are the two fields that we get in end user management. So let me go back to end users here. I’m gonna click end users. Set up end user management. These two fields here, the skim URL and the token, I’m gonna copy this URL, and I’m gonna put it… There we go. And I’m gonna copy this token, and I’m gonna bring it here into secret token. And then we test the connection. If this… If the test was successful, I’ll then click create. This takes a moment. When connecting Addigy to Entra, we go through red… So where do you go? You go into your policy, integrations and setting… Excuse me, integrations and settings, identity. Right? So before I actually start provisioning users, I need to assign users. What users am I gonna bring into Addigy? So I’m gonna select users and groups. Right? What you don’t wanna do… Back to the question, Pedro asked earlier. Right? Forty minutes. What you don’t wanna do is provision this and forget to select a user. Because if you provision it and forget to select a user, guess what? Now you’re… Then, you you know, you fix it. You might have to wait forty minutes for the user to actually show up here. Ask me how I know. So I’m gonna click add user group. None selected. I’ll click none selected. I’m gonna do the Addigy certified training group. This is my group. I can select just a specific user, or I can select a group of users. And I’ll… In this case, I’ll just do a group, and I’ll click assign. There’s my group, Addigy certified training. Now I can go back into provisioning. Make sure that the provisioning status is on, right, ensuring that the synchronization… The sync the sync is occurring. It’s synchronizing successfully. Make sure it’s saved. Provision on demand. And I’ll just go ahead and provision my user immediately here, Mauricio. And I’ll click provision. Alright. There’s my user. It was imported into Addigy. Let’s confirm. There it is. Right? So what did what did we bring into Addigy? I… Why did we see more than my… Just you… My user? Because, he’s he’s assigned to the Addigy certified training group, and that’s who I brought in, right, the Addigy certified training group. I just provisioned my user here. So what exactly is happening here is you… First, you can select different columns that you find more, you know, relevant, like title. What groups are they a part of? Are they an active user? Is this user still, like, a day to day user? Have they left the company? Have you fired them? Right? You gotta make them nonactive in their IDP so it’s reflected back here. But, anyway, just like you would with any device fact filtering, you look through these these options here and you find the ones that fit best… Fit you best. And guess what you can now do with these same, filters? Create flex policies. So the moment Mauricio enrolls his, or excuse me. The moment Mauricio logs into identity, and it’s kinda weird speaking in third person here. The moment this guy here logs in through Identity, what’s gonna happen is Identity knows that they’re a solutions architect, and they’re gonna receive solutions are… Whatever is in the solutions architect policy. When you remove Mauricio, right, or the new, you can do, like, an offboarding users type of policy where I can use this fact. Add filters, add filter active equals false. So if I go into my IDP and I unassign that user or I delete them, we can have them listed here in this particular policy. Right? Whichever machine fits this filter here. Active equals false. If a user on that machine is false, that machine ends up here so that you could see which user is no longer active. And active, again, means that they’re still in the IDP. If this shows red, it’s because, again, they were deleted or there’s a specific button in the in the IDP where they’re nonactive. So I see my users, and I see that this user has not, been assigned the machine yet. You have different ways that you can assign users. You have… Let’s actually go back to the slides. I’ve skipped a couple of slides here. Alright. We’ll talk about the four different options you have because iOS and iPhone doesn’t have… Don’t have identity, but they have another option that you could use. So let’s go ahead and start our next poll. After everything I just covered, should it be a, b, or c? Start poll number two. Let me go ahead and start launch poll number two. There we go. Feel free to answer that poll, and then we’ll go ahead and finish up with the login and see what happens. Can I have the recording, please? Yeah. Absolutely. I believe there is a recording afterwards. I don’t know how… You know, it’ll take some time for it to process. Speak to your customer success manager. Again, you could ask your customer success manager, but I believe we’re gonna upload these into Addigy Academy. So just look out for them at Addigy Academy. Alright. Perfect. Appreciate everybody answering the questions. Right? It goes from IDP to Addigy. So if anything in the IDP changes, if you go in there and you change their their office location, if you change their job title, that will be reflected act… You know, in Addigy itself. So where you saw, it said solutions architect and, you know, maybe the the job title changes to solutions engineer. You you you make the change in the IDP in order for it to flow down into Addigy, and that did rhyme. Yes. Find any device by the person who uses it. So you have four different ways of assign… Of having a user be assigned a machine. What we’ll see here is Addigy identity. When I log in with my user, I should then just log in and receive, solutions architect related, settings and configurations. For iOS or iPad and macOS, you also have, the enrollment SSO option, the second option, which assigns the device to the employee during the initial setup before they even reach the desktop. Obviously, this requires Apple Business and using the ADE enrollment method. You have the manual assignment. So you have two ways you can manually assign a user to a machine. You have… When you… In the end user management panel here, if I click assign devices, I can either upload a CSV, you know, so I can do this in bulk, or I can just click on the user and assign a device through here. Right? So either this guy logs in, enrolls via ADE, I upload a CSV, or I assign it manually. That’s how they get assigned the machine. K? So let me bring up my machine here. Here’s my machine. Here’s the Addigy identity login window. Right? Remember, just a side note, give yourself the ability to at least access the machine because if you have any network connectivity issues, you’re not gonna… You know, you’re gonna have a struggle here authenticating. So in this case, I’ll just do at addigy.com. Password. And, again, it’s just based on my user. So as soon as I log in… Welcome back, Mauricio Estevez. Thank you, machine. Appreciate you. I’ll log in. And whatever’s in that solutions architect policy or whatever device fact I’m using in my profiles will start to then be sent. Right? The user will receive it. I am confused about multitenant. How does EUM work? Yeah. I got you. I’ll show you, mister anonymous attendee. And, what kind of fallbacks are available with no network? Yeah. Great question. So I’ve logged in. And, again, let’s just pretend I got a ton of solutions architect specific items here, like software, etcetera. I’m going to log out and answer question one first, and then I’ll answer, the other question here that I see. And thanks so much, Ali, for helping me out in the chat, my friend. I appreciate you. So back to the login window. For Aaron, what are the fallbacks? Fallbacks are clicking options, local user login. Right? And you just log in as the user locally. That way, even without a network, you can at least get into the machine. K? And you wanna do this, I I would consider it, like, a mandatory setting to leave enabled. Your network might be perfect, but you never know. Right? If you work in IT long enough, you’ve probably dealt with a network issue here or there. Right? That’s kinda just part of the process. So, just… Better to be prepared for it than not to be. Right? Always good to be prepared. I am confused about multitenant. How does EUM work for multitenants? Great question. So, initially, when this feature first came out, it was just this one panel here. That’s it. I think when it was still in beta, it was just this. And so it was a bit of a challenge for an MSP. Now go to connections and add a connection. Right? So let me actually rename. I don’t know where… These names are interesting. So let me call this Alpha Networks, and I’m gonna call this connection here. What was it? What was the policy? Greenshore Systems. Right. So as an MSP, Alpha Networks, maybe they’re, you know, using Entra, and then Greenshore is using Okta. But the the the same idea applies. You would create a connection to that IDP through here. And then as far as the policies, make sure… Right? I I I showed Alpha Networks as an example. If I click Alpha Networks, integrations and settings, identity. Right? I have to make sure that this is set up. K? This will inherit for my engineering team, for my sales team, for my solutions architects. Greenshore doesn’t get this identity window. If I want… If Greenshore wants to use identity and end user management, what would I do? I’ll go to Greenshore, and I’ll create it there. Right? So that’s how it works for your multitenants. K? And, again, you have, different options with your filtering. So you can offboard your users. Right? If a user goes inactive, meaning you delete them in an IDP or you’ve you’ve, I think if I click on my username here, for example… Let me go to my user. I’ll show you what I mean by inactive. I’m not gonna actually make my user inactive, but I think there’s a button. It’s pretty obvious one too. Let me go into my user. Okay. I don’t know why it keeps loading on me there, but there’s a button there that says revoke sessions. Right? I can revoke them. I could edit them. I could delete them from here. Right? I don’t know what… What’s going on here. Why… There we go. You see the account status as enabled? If it’s disabled, right, like the… You know, he he left the company. It’s disabled. Machine is now gonna end up in this particular policy here so you know, you know, what’s what. So let me go back to slides. Right? So we saw the identity method of enrollment. Enrollment SSO is the other option primarily for your iOS and iPads. Manual assignment. We saw how to manually assign bulk or, machines in bulk through a CSV, and we saw how to assign a machine individually and then manage. So, again, you have these… Oops. You have those device facts that I posted earlier, right, using the syntax for a device fact that goes into a device settings profile, User field ID, replace field ID with any, you know, employee department, office location, etcetera. You can use attributes in a variety of different ways. We can see… We can use them in our tables. Right? If I go to devices, tables, I can create a table, maybe call it alpha networks EUM. And then in here where is it? Oh, actually, I don’t think it’s available yet here. Let me see job title. I know your identity facts are here, but I actually… I don’t think your EUM facts are here yet. Let me confirm. Yeah. Okay. Okay. Disregard what I just said. I guess this I thought this was available also for your device tables, but I guess it’s primarily for your flex policies. Okay. All good. So back to policies. So, primarily, the filters that you’re using won’t be in the device tables. It’ll actually be in your policies themselves, whether it’s offboarding users or designating users based on their… The, you know, the team that they’re on, the office that they’re located in, their employee ID. Right? Look. My machine enrolled into Alpha Networks. It’s getting baseline Alpha Networks. It’s getting baseline Alpha Networks settings and configurations. But guess what? It’s also now receiving something… Whatever is specific to solutions architects. And, yes, I 100% agree with Ross. I think that should be, 100% a feature request. I’m gonna confirm something here now too. Now I’ve got this, let me just confirm something here. Yep. Same thing. Could probably also be used as a monitoring alert, I think, would be, very cool as well so that you can see when a user goes inactive or you can see if their job title changed. You can currently do that with identity, but not primarily with the EUM facts. But perhaps it could also be included here as well. Getting out of… I’m going out the balance of the webinar here. So to summarize, right, summarizing, we focus primarily on the end users in this example here that we’ve, you know, we’ve seen today as opposed to the machine. In order to get everything configured and set up, we have to start in our policies, integrations, and settings. Again, as an MSP, make sure that this is filled out, your MDM enrollment profile. We’ll just type Alpha Networks. You wanna then ensure that you have identity. But more specifically, when you click customize identity, assign users to devices automatically needs to be enabled in order to utilize the e… The end user management feature here. And, again, if you wanna collect additional information, you can. There’s… Again, there’s some identity specific facts that you can use, but there’s also some specific facts for end user management. So there is a slight difference there. Save. It would… I would suggest just having both enabled. Right? Once this is set up, you go into your IDP. In this case, I have Entra. Remember, you can, save these four these four tabs like I have, users, groups, app registrations, and enterprise apps. You use app registrations to configure identity. You use enterprise apps to configure SCIM, which brings in your users from identity into Addigy. Once that’s complete, you provision the users. So here’s my, I don’t know why this is doing this. I’m I’m… I just clicked enterprise. All applications. Right? Here’s my Alpha Networks webinar scheme. These are the users that I’m gonna bring into Addigy. What users? Let’s see. Oh, actually, hold on a second. Webinar users. One second. There it is. Users and groups. Sorry. It did my… There we go. Looks like I’m having a conniption here. I promise I’m not having a heart attack. It’s just… I’m clicking once. It looks like I’m clicking a billion times, but I promise I’m not. Alright. So we confirm in SCIM. Right? We confirm in here what users are we trying to provision. In my case, I selected a group of users, any user in Addigy certified training. I can just be even more specific with just selecting a specific user. Once that’s complete, we confirm that this is… That that information is being brought into Addigy through here. And then we use this here. Right? We have our table here. This is the… I guess this is the table we’d use instead of the devices table. We could just use this table here. However, this here is not just for this table. This is also for flex policy filters. Sorry. I had a quick brain fart there. Okay? So these columns that we see here aren’t just for this table here. You can also use this for your flex policy filters. And depending on if those fields are filled out, if if, you know, if the user is in an engineering team or sales, etcetera, it receives those instructions. Right? Let’s go back into the slides. I think we’ll summarize and see if there’s any last minute q and a. Right? So you have collect user attribute data. It only collect… It only collects this information when the user signs in. Right? So when they sign out, the the… Those identity facts go back to NA. The end user management facts stay the same. Right? I guess that’s the subtle difference between the two. When you log in, you collect user attribute data just shows you what’s there when they’re currently logged in. End user management, even after they’ve logged out, you still see those fields. Right? And then we saw the steps that were involved. We enabled Addigy identity. Right? We made sure it was connected to the IDP, in my case, Entra. We saw my user sign in. We saw the machine was assigned three… Four separate ways of assigning it. Settings and apps are applied. And once configured, employees simply sign in. Addigy identifies who they are, and the appropriate settings and apps be applied automatically. Remember, what’s important is you need not just identity, but you need that configure user management setting enabled. Otherwise, nothing happens. And then the last poll before we end today’s session. Right? And, again, you can use the active equals false fact. This is just to see what other admins are doing out there. If you don’t wanna answer, no worries. Someone was honest. It sometimes slips. There we go. That’s the one I’m really looking for. Lots of different ways that we can identify our machines, right, based on the last time they were online. Maybe if they haven’t been online for third… You know, it’s been thirty days, have them in a flex policy. But for end user management in particular, the fact that you’re gonna use is active. So if I go into my IDP and, again, either delete the user or disable their status, they are set to an inactive user. Thus, they can no longer long… They’re inactive, and they get now labeled accordingly into the disabled, flex policy. Okay? Like we saw here. Offboarding users, filter, active equals false. So if, again, Mauricio gets disabled or deleted, the machine ends up in here. And when we’ve seen other examples of ways that you can offboard, you can also do… You know, last time the machine was off, online. Last online, you know, it’s been over a month and the user’s inactive. Let’s have the machine in here in this particular policy so that we can end up, you know, doing what we need to in order to reprovision it for our next users. K? And slides to then finish up. Right? So, again, conclusion and takeaways. You need identity. You need a certain setting enabled. Understand the filters that are available. So now we have five different… Or four different tiers of filters. We can use device facts, custom facts, static fields, and user attributes. So now an additional tier here for you to, configure your flex policies. Automate the management, right, using their employee information like their department, understanding the filters, the key takeaway, your identity provider tells Addigy who your employees are. Addigy connects them to the machines, and the flex policies are what’s used to automate their management. We do have guides for Okta and Microsoft. Hopefully, soon rather than later, we have something for Google. K? Currently, Google is not supported. We have documentation, though, for Microsoft and Okta. Everything that I covered, there… It… It’s directly from the KB. So just read the KB article step by step to configure both identity and end user management. But before we end today’s session, one last poll for Addigy Boost. This is just to see if anybody wants for us… Would like for us to follow-up with you. If you’re good, awesome. If not, no worries. We’ll follow-up with more information just depending on your response. I’ll leave that poll open. I’ll leave the poll open. And so What happens if a user logs into another Mac? That shouldn’t be an issue. So it shouldn’t be… Yeah. Yeah. Exactly. So I think users can have multiple Macs. Correct. But I… A Mac can’t have multiple users. Yes. Correct. It won’t prevent them. There’s not gonna be an issue. They’ll just log in and wherever that… You know, whatever settings are… You know, whatever… However you have your flex policies configured, if they fit that criteria, they’ll receive that information. If not, you know, nothing happens. Can it bind to a local account? Yes. Your identity users, you can either create a new user or you can sync it or or bind it to an already created user on that machine. Correct. Thanks, Pedro. Appreciate you. Alright, folks. I’ll leave the last poll open here for Boost. If you’re good and you don’t have any other questions, I truly appreciate your time. We do have our Addigy training. So if you’re interested in more training, we have our ACA, ACE, and ACP courses available. We also have a free tier in Addigy Academy basics. But otherwise, really, really appreciate everybody’s time. Great questions. Thanks for your participation. Thanks again to both Anna and Ali for being here alongside to help answer any questions in the chat. I’m just one person, guys, so I try to answer as many as I could, but I’m sure Ali took care of a couple others. So thanks so much, Ali. Appreciate you. Thank you so much, everyone. I’ll go ahead. If I don’t see another question pop up, I’ll go ahead and end the session. And look forward to more. Look forward to more. Okay? Look forward to another one. One second here. Let me see something here. What happens when a user… So then the user gains a second device. And depending on the other one, someone might just end up losing that other device. Right? So you have you have different way… Different cases on that. So, like, if I were to sign in to an unassigned Mac, it’ll show me right here. If I were to sign in to an unassigned Mac or another Mac, devices would be two. So I can have multiple devices. Right? But I can’t have a device that has multiple users for this particular use… Feature here. K? Thank you, guys. For everyone saying thanks, thanks so much for your time. I’ll just sit back and help out any last minute, folks here. Yeah. So, yes, a user can have… If they log in… If if this user logs into another machine, no issue. They’ll just be… They’ll just have another machine assigned to them. Yes. There is… I I believe you should ask your customer success manager or your account manager, and they can send out the recording to you. No problem. But, again, anticipate this, eventually added in Addigy Academy. Appreciate you, David. Thanks, everyone. Look forward to the next one. We’ll definitely do some more of these. Appreciate everybody’s time. Hope you all had a good lunch, and have a wonderful rest of your day.
