User Domains Overview
Domains are organization units that can be used to separate users into different groups, each with its own set of account administrators and security policy requirements.
IDI provides each Company a default User domain to start with. In many cases this may be the only domain a company will ever need. Any User accounts created are by default added to this Domain and any changes to Password policies (e.g., password length, expiration) affect all users.
Additionally, any Users who have been assigned Roles that allow them to manage User accounts will have the ability to see and administer all of the accounts for your company.
Creating additional domains can be useful when you want to have administrators who only have the ability to manage a certain subset of User accounts. You can achieve this by creating a new Domain and then placing all of the subset accounts that should be managed together into this domain.
Domains are also useful when you have a subset of users who need different Password policies applied to them.
Password polices are configured at the Domain level and can be different from Domain to Domain.
Example
Your company uses a third-party call center service. Customer Service Reps for this service are not direct employees of your company but still need access to your IDI environment.
Preferably, supervisors in the call center will manage on their own the creation of user accounts and resetting passwords for their own employees.
In addition, since these users are not employees of your company, you want them to be forced to change their passwords every 30 days instead of every 90 days as an added security measure.
Solution
You create a new user Domain in Security called Call Center. When you create this Domain you set the Domain Password Settings to expire passwords after 30 days.
Once created you add User accounts for the supervisors at the call center and add them to this new domain.
These supervisors now can begin to add and manage User accounts for their employees without being able to see or affect accounts in your default domain.
Working with Domains
From the Domains page you can:
Search for a specific domain to view or edit.
Create a domain (to separate users such as agents, or to separate users by company division).