Skip to Content
AdministrationAdding Users

Adding Users

A fresh EUnifyer organisation has exactly one person in it: the admin who created it. From there you have four ways to bring everyone else in.

The Users page at Admin → Users shows a picker on first visit. This page explains which path to pick.

Decision tree

If your situation is…Pick this path
1–10 users, no shared identity providerInvite individually
10–500 users, names on a spreadsheetBulk import (CSV)
Company already runs Entra ID / Okta / Google Workspace — you want users to sign in with those credentialsFederate to your IdP (SSO)
Company runs Entra / Okta and you want the user roster to stay in sync automatically (new hires, departures, role changes)SCIM provisioning

It’s fine to combine paths. A common setup:

  1. Federate sign-in to Entra so users log in with their existing Microsoft credentials.
  2. Add SCIM on top so disabling a user in Entra disables them in EUnifyer within minutes.
  3. Still invite contractors manually (they don’t exist in your IdP).

Path 1 — Invite individually

Admin → Users → Invite User.

Fill in the email (required) and optionally first/last name, department, job title, phone, employee ID. Pick a role (default: Member). Click Create.

Personal email is optional. If the new account’s mailbox does not exist yet, you can enter a personal email to receive the invitation or leave it blank and share a copied invitation link. This works after you verify your mail domain too.

When an address can receive email, the user gets a set-password link there. Otherwise, EUnifyer creates the invitation without sending email. The user follows the emailed or copied link, sets their password, and finishes setup. Until they accept, their row in the Users table is marked Pending Setup.

Resend the invitation renews it and sends email when an address can receive it. Copy invitation link gets you a fresh link to hand over directly, for example in person. Users do not need an existing personal mailbox to finish setup.

Path 2 — Bulk import from CSV

Admin → Users → Bulk import.

Upload a CSV with one user per row. EUnifyer parses the file, shows you a preview of the first five rows, lets you pick a default role for rows without an explicit one, and on confirmation invites everyone in one pass. You get a per-row result table back so you can see who was invited, who was skipped as a duplicate, and any errors.

Full format reference: Bulk Import (CSV).

Good for: migrating from a spreadsheet export of your current HR system, or onboarding a department of dozens at once.

Path 3 — Federate to your IdP (SSO)

Admin → Identity → Single Sign-On.

Configure the connection to your identity provider (Entra ID, Google Workspace, Okta, ADFS, or any generic OIDC/SAML 2.0 IdP). Turn on Auto-create users on first SSO login.

From then on:

  • Users sign in via your IdP — Microsoft/Google/Okta login screen, their existing password, their existing MFA.
  • EUnifyer creates the user row automatically on first sign-in.
  • They never have a separate EUnifyer password.

Full step-by-step for the most common IdPs:

Good for: any organisation that already has an identity provider. Users sign in once with credentials they already know.

Path 4 — SCIM provisioning

Admin → Identity → SCIM provisioning.

SSO covers sign-in (users land in EUnifyer the first time they sign in). SCIM covers the roster: your IdP pushes user lifecycle changes to EUnifyer continuously.

  • New hire appears in your IdP at 09:00 → exists in EUnifyer by 09:01.
  • Offboarded at 17:00 → disabled in EUnifyer within minutes.
  • Department or role changes propagate immediately.

You generate a bearer token in EUnifyer, paste it into your IdP’s provisioning configuration with the SCIM endpoint URL, and assign users on the IdP side.

Full setup guide: SCIM 2.0 provisioning.

Good for: enterprises with strict on-/off-boarding SLAs, or any team that wants the IdP to be the single source of truth.

Day-to-day management

Once users are in:

  • Edit (row action menu) — name, department, title, role, phone, employee ID. The dialog also shows last sign-in, last activity, and an effective-permissions preview.
  • Activate / Deactivate — flip is_active. Deactivated users keep their data but can’t sign in. Reactivating is one click from the same menu.
  • Resend invitation — for pending users whose set-password email got lost.
  • Force sign-out — kicks the user out of all active sessions immediately. Use during incident response or rapid offboarding.
  • Delete — permanent. Removes the user from every service (identity, drive, mail, chat). GDPR-cascade safe.

What the row’s status badges mean

BadgeMeaning
Active + verified YesFully onboarded user, signing in normally
Active + verified NoAccount exists but hasn’t completed first sign-in yet (SCIM-pushed or freshly invited)
Pending SetupInvitation created, user hasn’t finished setup yet
DisabledSoft-disabled via Deactivate or via IdP active=false. Reversible.

Adjacent topics