Set up Manager Approval

​

Overview of Manager Approval Methods

​

Verification by Entitlement Group

Prerequisites

• You must create an entitlement group in TruU before enabling manager approval workflow.
• Add all intended approvers (managers or delegated reviewers) to this group.

​

Create Entitlement Group

1. In the TruU Admin Console, navigate to Entitlement Groups and Click Add User Entitlement.

2. Under Add Entitlement Group,
   1. Provide a group name (e.g., “Device Approval Managers”).
   2. Entitlement Group Description
   3. Assign to certain directory groups our add directory users who will be responsible for approving device verification requests.
   
3. Save the group.

​

Set up Manager’s Approval Workflow

1. Go to User Identification and Click Add Identity Verification Workflow on top right

2. Provide a workflow name and select the User Self-Service needed

3. Select Add Identity Verification Step

4. Choose the approvers needed.

i. For Verification by Entitlement Group, Select the entitlement group created previously. ii. For Verification by User’s Manager, Select a default action if there is no manager saved for that User.

5. Choose the Allowed Verification Methods for the managers.

6. Select Require verification to use device for authentication

Note: Devices will be enrolled after completing the self-service portion of enrollment with a state of ‘Unverified’ (which is below ‘Basic’). If a user tries to use this device for authentication, they will be prevented from using it.

7. Click Save to complete this workflow set up.

---

Settings: User Identification