Setup customer profile

Steps to guide you with examples

1. Create a custom attribute.
2. Create an end-user license agreement.
3. Create customer profile and use custom attributes.
4. Configuring the social identity providers for customer login.
5. Integrate customer profile page with an application.
6. Access the customer profile and update it.
7. Access the privacy and the verification devices of the customer.

1. Create a custom attribute

The custom attribute is user attribute specific for a tenant. We need to create a custom attribute for use in the customer profile. Login to ISV tenant admin portal with admin credentials.

• Navigate to the Admin -> Directory -> Attributes page.

• Open the attributes setup page on click of the Add attribute button. Select the type of attribute as custom attribute and leave the purposes of the attribute as it is.

• Come to the 2nd page of the setup and enter attribute name as 'lightsabercolor'. Now navigate to Source and value page. This page shows a selection of the source of the attribute values and the expected data type. Enter 'lightsabercolor' again for the attribute name from the identity provider text field and click next button.

• This shows you the constraint page. Don't select any constraint for now and click on the Add attribute button.

  

2. Create an end-user license agreement

The end user license agreement (EULAs) is the legal documentation users must consent to. After they are published, relevant EULAs can be associated with applications, user flows, and privacy profiles.

• Navigate to Admin -> Data privacy & consent -> EULA agreements page.

• Click on Create EULA button. Enter EULA customer as EULA name then go to next screen of the setup.

• Here you need to enter the company URI where the terms of use document are located for the customer. Enter the url (ex: https://www.ibm.com/legal) in the Terms of use URI text box and then click to Create EULA button.

• Publish the draft copy of the EULA by clicking on the Publish draft button. You can see it live and ready to use in a profile.

  

3. Create customer user profile and use custom attributes

A user profile is a set of pre-defined or custom attributes like first name, last name, phone number, email id, etc. Follow these steps to create customer user profile.

• Navigate to Admin -> User experience -> Profile management.

• Click on the Create user profiles button located at the top right corner of the profile management page and enter the profile name attribute as 'Customer' and URL path as 'customer' then click on the Create profile button. This will launch the user profile in draft mode.

• The draft mode shows two steps (step 1 & 2) by default in the profile. There are five editable default elements provided to you in step 1. They are the 'Profile' section title, 'Email address' form element, 'Given name' form element, 'Surname' form element, and a 'Save profile' button.

• Clicking any element would enable the form element editor window at the right side of the page. There are nine types of form elements (Agreement, Checkbox, Date, Dropdown, Email, Phone, Radio button, Text block, Text input field). Each newly added form element needs to attach with a pre-defined or custom attribute. On click of the 'Email address', the form element editor shows you that the Verify email is disabled along with other two validations. It would be enable in coming release.

• Now modify the customer form to add a few more elements using the form element editor.

  • Click on the 'Profile' section title and rename it to 'Customer Profile'. This would be the title of the customer profile page.
  • Add a new form element of type 'Dropbox' and select the pre-defined attribute 'lightsabercolor'. Rename the field label to 'Lightsaber color'. You can put some helper text here if needed. Now put few option labels for this dropdown list like Black, Blue, Green, Red and store corresponding values like 1, 2, 3, 4.
  • Add a new form element of type 'Agreement' and select 'EULA customer' the end-user license agreement that was created earlier.
  • Optionally, in step 2, set the message for successful profile update.

• Click on Save changes button to save the draft profile and open the profile in the preview mode by clicking the Get preview link button at the right side of the user profile. If you want to do any further modifications like label change or rearrange the position of the form elements, then you can reopen the draft profile and modify it.

  

4. Configuring the social identity providers for customer login

The Settings tab of the profile gives us an option to change the profile name, URL, and identity providers for the user login.

• Go to the Settings tab of the customer profile. Click on the second option of the Identity providers which is 'Select specific supported identity providers'. Check mark few of them like Facebook, LinkedIn, Google, AppleID.

• Click on Save changes button, and then click on Publish profile link to make it live.

  

5. Integrate customer profile page with an application

The customer profile link is ready to embed into any 3rd party application. We can use this URL in a company website for the customer login and the profile modification.

• Copy the customer profile URL (ex: https://<tenant-hostname>/usc/userprofile/customer) which is shared at the very top of this user profile page.

• Use this URL in a regular HTML anchor tag inside the application like this:

<p>
	View your profile
	<a
		href="https://<tenant-hostname>/usc/userprofile/customer"
		target="_blank"
		rel="noopener noreferrer"
		>here</a
	>.
</p>

6. Access the customer profile and update it

It's time to launch and access the customer profile using any of the preselected social identity source.

• On click of the user profile link from the application, customer gets the login page. If the customer is already authenticated then there is no further login page visible to the user otherwise it will ask user of the SSO authentication using Facebook, LinkedIn, Google or AppleID credential.

• After login user can see the email id, given name, surname, and the lightsaber color. Each customer can use this link to update the editable custom attributes like Lightsaber color.

• Now select any one color from Lightsaber color dropdown form element and try to save it. It will show you error message to select the agreement checkbox. Actually, to save the customer profile, you need to comply with the user agreement created at the time of the profile creation.

• Save the profile along with the selected agreement checked. It will show you the success message that 'Your profile is saved'. On click of Ok button, it navigates back to shows you the updated profile of the customer.

7. Access the privacy and the verification devices of the customer

After saving profile, the customer can navigate to the Privacy and Verification sections of the profile. This section gives user a way to manage the customer privacy consents and the MFA devices.

• After saving profile, click on the Privacy tab of the left navigational bar. The customer can review the list of the basic and the advance consents. The user can delete any of them if needed.

  

• Now click on the Verification tab located at the left navigational bar. The user verification protects customer's account access with a strong password plus an additional verification method as well as recovery options if the user get locked out. On click of the verification tab, it redirects you to the MFA page for an additional verification of the customer. You can see there are six verification method or device like email, text message, phone call, which can be added by the customer for additional security. Actually, this section is used to manage the list of user MFA verification methods, change the user password and set the security questions and answers.

  

• The customer would be signed out on click of the Log out link.

💎

Abhishek Shrivastava, IBM Security
Stephen Miessner, IBM Security