Palantir’s self-service passwordless identity provider is in a beta state and may not be available on all enrollments. It is currently available for new enrollments configured for Developer Tier and AIP Bootcamps as of Summer 2024.
In most cases, your enrollment administrator will integrate your organization's existing identity provider with the Palantir platform so you can log in with the same credentials you use across other internal systems.
This page provides detailed guidance on how to access and manage user accounts within your enrollment when using Palantir's self-service user directory. The following instructions describe how to add new users, enable or disable existing accounts, and reset user accounts.
To begin managing users within your enrollment, you will need to be an enrollment administrator
or an authentication administrator
. If you do not have one of these permissions, an existing enrollment administrator can grant you the relevant role. Review Grant user permission to manage users of the enrollment for more information.
To navigate to the Manage Users page, follow these instructions:
If a user is locked out of their account or needs their account reset for any other reason, an administrator will need to reset the user’s passkey. Upon reset, the user’s existing passkeys will become invalid and they will receive an account recovery email with a login link and a request register a new passkey. The one-time password in the email expires in four days if not used, but can be re-sent if required.
To reset a user account:
To revoke access from a user, an administrator can disable the account. The user will no longer be able to register, login, or have their account reset until the user is re-enabled.
To disable the user account:
For a disabled user to regain access to the platform, an administrator will need to enable their account. Once enabled, the user’s account is reset and they will be able to register and login.
To enable a user:
To permanently revoke access from a user, you should delete the user.
This action cannot be undone and the user will no longer have any access to the platform. Any resources the user owns should be shared or ownership transferred before deleting the user.
To delete the user account:
To give other users the ability to manage users within your enrollment, you will need to grant these users either the enrollment administrator
and/or authentication administrator
role. For more information on enrollment permissions review Levels of permissions.