# Administering VeevaID

Administrators can manage a Vault's <a href="/en/gr/548356/">VeevaID</a>
 settings as well as register new VeevaID users. <a class="external-link " href="https://www.veeva.com/meet-veeva/partners/veeva-id/" target="_blank" rel="noopener">VeevaID Partners<i class="fa fa-external-link" aria-hidden="true"></i></a> can also register their apps and gain access to the VeevaID API, support, and security best practices.



<div class="note-border alert-info">
  <div class="alert alert-info" role="alert">
    <div><i class="far fa-info-circle"></i></div>
    <div class="alert-text">
      <p><strong>Note</strong>: When a <a href="/en/gr/38996/#synced-user-fields">VeevaID user’s account details</a>
 (such as <em>Last Name</em>) change, the user must first initiate the update process in the VeevaID portal. Once updated in the portal, the new details are updated upon log in to each individual system. These changes are also populated on the user’s <a href="/en/gr/46534/#create-persons"><em>Person</em></a>
 record if it is associated with their VeevaID.</p>
    </div>
  </div>
</div>



## VeevaID Usage Best Practices

VeevaID is designed for external users who work with multiple sponsors or CROs.

Other types of users who should not use VeevaID include:
  * External users who already have a Vault login. These users should use <a href="/en/gr/38996/">cross-domain authentication</a>
.
  * Internal users within your organization. VeevaID does not allow users with a username that matches the Vault's domain. For example, VernBio's domain is @vernbio.com, therefore, username domains for VeevaID users in the VernBio Vault cannot be "@vernbio.com". These users should use SSO with your enterprise identity provider to provide the best end-user experience and reduce the number of logins they need to remember.

## Managing VeevaID Settings in Vault {#managing-veevaid-settings-in-vault}

Administrators can manage individual Vault settings for VeevaID from **Admin > Settings > Vault Settings > VeevaID Settings**.

The following information is available on the VeevaID Settings page:

* VeevaID Name: The name used when referencing the current Vault on the VeevaID portal. This field defaults to the product family name.
* VeevaID Description: A description of the Vault used on the VeevaID portal. This field defaults to a product family description.
* Company Name: The name of the company associated with this Vault. This field defaults to the Vault's sponsor name.

Select **Edit** to modify these fields. If you attempt to blank any of them, the values are reset to their defaults.

## Registering VeevaID Users

To register a VeevaID user:

1. Navigate to the **Admin > Users & Groups > Vault Users** page and select **Register VeevaID User** from the **Actions** menu.
2. In the **Register VeevaID User** dialog, enter the user's email address.
3. Click **Search**.
4. Select **Invite User to VeevaID**.
5. Enter the user's **First Name** and **Last Name**.
6. Select the **Language**, **Locale**, and **Timezone**.
7. Select the **License Type** and **Security Profile**. Vault automatically assigns the VeevaID Security Policy for the new user. If the _License Type_ field is not visible, manage application-specific licensing in the next step.
8. Optional: Select a license value for each application. You must select a license value for at least one application. Some license values may be unavailable <a href="/en/gr/5721/#application-license">depending on the application</a>
.
9. Select **Send Invite**. This sends an email to the user to complete the registration process. You will receive an email notification when the user has completed their registration.

<div class="note-border alert-info">
  <div class="alert alert-info" role="alert">
    <div><i class="far fa-info-circle"></i></div>
    <div class="alert-text">
      <p><strong>Note</strong>: The auto-created VeevaID Security Policy is not visible in Admin and is not editable. VeevaID and Vault usernames are unique to their domain. For example, cross-domain users have the same username in all domains where they are active. If their username is updated in their home domain, Vault updates their username in all cross-domains as well. If a user with the updated username exists in one of their cross-domains, an error occurs upon updating their username.</p>
    </div>
  </div>
</div>



## Additional Security Settings

Once a VeevaID user has an active account in a Vault, all other security permissions depend upon that Vault’s configuration. This can include permission sets, lifecycle roles, and atomic security. For the <a href="/en/gr/14691/#domain-information">session duration</a>
, VeevaID users will follow the setting in the Vault they are in. If they are on the VeevaID portal and not active in a Vault, their session duration is 30 minutes. 

## Checking the VeevaID Registration Email Status

Vault allows you to check the <a href="/en/gr/514128/#status">status</a>
 of VeevaID registration emails through the _VeevaID Invites: Vault User Creations_ (`veevaid_invite_vault_user_creation__sys`) object. You can use this feature to find more details on VeevaID registration emails, such as the date and time it was sent, when it expires, and if the user received it or not.

To check a VeevID registration email status:

  1. Navigate to **Business Admin > All VeevaID Invites: Vault User Creations**.
  2. Click an ID in the **Name** column to open the record detail page.
  3. Click **All Actions > Email Registration Status**.

The **Email Registration Status** dialog opens and contains details on the VeevaID registration email's status. You can also access this action by clicking **All Actions** next to the ID in the _Name_ column.

## Resending a VeevaID Registration Email

To resend a VeevaID registration email:

  1. Navigate to **Business Admin > All VeevaID Invites: Vault User Creations**.
  2. Click an ID in the **Name** column to open the record detail page.
  3. Click **All Actions > Resend Registration Email**.

This action is also available from the **Email Registration Status** dialog if the status is _Failed_. You can also access this action by clicking **All Actions** next to the ID in the _Name_ column.

[1]: #managing-veevaid-settings-in-vault