📋 User Management: Creating user accounts manually, automatically, or via AD

This article explains to administrators the various methods for creating new user accounts (manually, automatically, or via external directory services) and how to configure them.

User management: Creating user accounts

User management is a central function for administrators to control access to the FTAPI platform and distribute permissions efficiently.

Important note on security principles
We strongly recommend adhering to established security principles such as Segregation of Duties and the Principle of Least Privilege. Assign only the rights that a user strictly requires for their tasks to maximize security and meet compliance requirements.

Manual user creation

As an administrator, you can create new users quickly and easily via the web interface.

Navigate to the Administration tab and click the New user button.
Fill in the required fields: email, username, and password.
- The password must comply with the defined password policies. If the policies are not met, the field will be highlighted in red for immediate correction.
Configure the startup options for the user:
- Force new password: If enabled, the user must change their password upon their first login.
- Send access data: Sends the user an email with a link to set their password for the first time.
Optionally, additional data such as first and last name, phone number, or group membership can be entered directly.
Click "Save" to complete the creation.

Automatic user creation & self-registration

To reduce administrative effort, the creation of users can be automated.

For delivery to unknown recipients: You can configure the system to automatically create a new user in a defined default group when a delivery is sent to an email address not yet registered in the system.
Self-registration: You can allow users to register themselves in the system. Access can be controlled via whitelists (e.g., only for your own company domain *@firma.de) or blacklists to ensure that only authorized persons can log in.

Integration with external directory services (e.g., Active Directory)

FTAPI can be seamlessly integrated into existing identity provider systems such as Azure AD, ADFS, or other LDAP directory services. This allows users to log in with their familiar corporate credentials (SSO) and avoids duplicate user management.

📋 Group management: Configuring permissions, licenses, and priority rules

📋 User Management: Creating user accounts manually, automatically, or via AD