FAQ

Manage users

The Olvid Management Console is part of Olvid Enterprise and enables easy and secure deployment and ensures a simple and intuitive user experience.

Once Keycloak Olvid plugin is installed and configured, Administrators and Editors of the Olvid Management Console can manage and modify everything related to users in the Olvid Users page.

You may:

  • Create users one by one.

  • Import a batch of users through a CSV. For this, the CSV should contain 7 columns, in the following order (leaving the password field empty will generate a random password for them):
    firstname,lastname,username,email,position,company,password.

  • List all users in the realm, filtering by various criteria to see, for example, who has activated their account.

  • Edit Profile to modify the name, position or company of a user (for users imported from LDAP, keep in mind that some fields may be overwritten on the next synchronization).

  • Reset a user’s password, with either a random password or one you choose (for LDAP or IdP users, this option is not available as they do not have a Keycloak password).

  • Sign out users to force them to reauthenticate with Keycloak, even if their session was still valid.

  • Revoke Olvid ID when their Olvid ID may have been compromised. The user will remain in Keycloak, but its Olvid ID will be cleared and the contact will be blocked on all the other users’ devices.

  • Remove User When they leave the company. The user will be completely deleted from Keycloak.

Revoke Olvid ID

For which situations?

  • Select Revoke Olvid ID if a user’s Olvid ID has been (or may have been) compromised (e.g. in the event of theft or loss of a device) or if the user has lost his or her ID (e.g. in the event of a change of device without a backup to restore).

This user will be blocked for all other Olvid users of this Keycloak directory.

This user will have to generate a new Olvid ID and register it with Keycloak.

What happens to the user?

  • In his profile: the user loses the green shield.

  • In his Contacts list : Keycloak contacts lose their green shield. He is excluded from the Keycloak groups to which he belonged.

  • In his discussions list : Keycloak group discussions are blocked. All other discussions are usable, but Keycloak contacts will never receive messages (because the user is blocked in theirs).

  • They lose their Olvid license.

What happens for his Keycloak contacts?

  • In their Contacts list : Display of the following warning icon  on the photo of the revoked profile. Possibility to manually unblock or reblock.

  • In their discussions list : The discussion is blocked (secure channels have been destroyed).

  • In all group discussions concerned, a message “[revoked user’s name] has left the group” is displayed.

What happens for other Keycloak users?

What happens to other Keycloak users who are not in contact with the revoked user?

  • In their Contacts list : Nothing, since he’s not there.

  • In their discussions list : There are none, except perhaps one or more shared groups. And if contact is re-established, the red alert will be displayed, but will remain unblockable.

What happens to contacts who are not Keycloak users?

Nothing. They are not even informed of the revocation, since they are not registered in the Keycloak corporate directory.

Remove User

For which situations?

  • Select Remove User if a user has left the company, or in the case of a job change that no longer requires him/her to be in the Keycloak.

This will unregister their API key and remove them from the directory.

The user will still be able to use Olvid as a free user, but will no longer be able to sign-in with Keycloak nor to connect to the directory.

What happens to the user?

  • In his profile: the user loses the green shield.

  • In his Contacts list : Keycloak contacts lose their green shield. He is excluded from the Keycloak groups to which he belonged.

  • They lose their Olvid license.

What happens for his Keycloak contacts?

  • In their Contacts list : the user loses the green shield.

  • In all group discussions concerned, a message “[removed user’s name] has left the group” is displayed.

What happens for other Keycloak users?

Nothing appears to other Keycloak users who are not in contact with the removed user.

Learn more