Palantir’s self-service passwordless identity provider is currently only available for new commercial and developer tier enrollments and AIP bootcamps.
In most cases, your enrollment administrator will integrate your organization's existing identity provider with the Palantir platform so you can log in with the same credentials you use across other internal systems.
This page provides detailed guidance on how to access and manage user accounts within your enrollment when using Palantir's self-service user directory. The following instructions describe how to add new users, enable or disable existing accounts, and reset user accounts.
To begin managing users within your enrollment, you must be an enrollment administrator
or an authentication administrator
. If you do not have one of these permissions, an existing enrollment administrator can grant you the relevant role. Review the documentation on granting user permission to manage users of the enrollment for more information.
To access the User directory page, navigate to Control Panel > User directory.
If a user is locked out of their account or needs their account reset for any other reason, an administrator will need to reset the user’s passkey. Upon reset, the user’s existing passkeys will become invalid and they will receive an account recovery email with a login link and a request register a new passkey. The one-time password in the email expires in four days if not used, but can be re-sent if required.
To reset a user account, follow the steps below:
To revoke access from a user, an administrator can disable the account. The user will no longer be able to register, login, or have their account reset until the user is re-enabled.
To disable the user account, follow the steps below:
For a disabled user to regain access to the platform, an administrator will need to enable their account. Once enabled, the user’s account is reset and they will be able to register and login.
To enable a user, follow the steps below:
To permanently revoke access from a user, you should delete the user.
This action cannot be undone, and the user will no longer have any access to the platform. Any resources the user owns should be shared or ownership transferred before deleting the user.
To delete the user account, follow the steps below:
To give other users the ability to manage users within your enrollment, you must grant these users either the enrollment administrator
and/or authentication administrator
role. For more information on enrollment permissions review Levels of permissions.