# Linking User Accounts

## Overview

Many scenarios exist where the same human user has access to multiple discrete users accounts, either within the same IDP or across different IDPs -

* Admins with both a regular user account and one or more privilege accounts, including across multiple Active Directory domains in an AD forest
* Users with separate accounts in non-federated IDPs, perhaps due to a recent M\&A event
* Users with both a individual account and access to or ownership of a shared account

In these cases, it's extremely important to maintain a link between these accounts, both for user lifecycle events (deprovisioning ALL users accounts when a user leaves the org) and during security investigations or incident response. For more details around the importance of this concept, please see our [Release Notes](https://docs.oort.io/release-notes/week-23-2023#introducing-the-link-user-capability) for this feature. &#x20;

There are two ways to link users in Identity Intelligence - [manually](#how-to-link-user-accounts-in-oort) or through [linkage suggestions](#how-to-link-users). The video below provides instructions on how to use the manual aspect of this feature.&#x20;

Instructions for how to link users manually and through linkage suggestions can also be found below.&#x20;

{% embed url="<https://www.youtube.com/watch?v=RXzYVcQUiY4>" %}

## How to Manually Link User Accounts

1. Navigate to one of the accounts for a user that has multiple accounts
2. Scroll to the bottom of the User's Overview tab, to the Linked Users tile. You can also click the **Actions** button and select **Link User** from the dropdown, which will jump you to the same widget<br>

   <figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2Fldf1DijVKAnWnLCQ5k0M%2FLink%20users%201%202023-06-16_15-26-12.png?alt=media&#x26;token=88da89f0-5de2-4dc2-86f3-d6dd89808855" alt="" width="563"><figcaption></figcaption></figure>
3. Click **Add** and search for another account to link to this user.  Click **Add** to link the accounts <br>

   <figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FiZgVtctEPK7VIl8m0gvJ%2FLink%20users%202%202023-06-16_15-26-12.png?alt=media&#x26;token=0a3cc498-d21e-41f0-8ff2-2273e2b1112a" alt="" width="563"><figcaption></figcaption></figure>
4. Note that the account(s) are now linked in both the tile and the dropdown under the User's name in the top right<br>

   <figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FdvFYInAWAxE1TgtZFL7S%2FLink%20users%203%202023-06-16_15-26-12.png?alt=media&#x26;token=684f468d-5367-486a-99db-3954f46b9f9a" alt="" width="563"><figcaption></figcaption></figure>

## How to Review and Accept User Linkage Suggestions

User Linkage Suggestions are determined based on an **exact match of either the user name or employee ID** (ex: John Doe and John Doe).&#x20;

There are two places to review User Linkage Suggestions - via [the Users Table](#via-the-users-table) or via[ a specific User's Overview Tab](#via-a-specific-users-overview-tab)

#### **Via the Users Table**

1. To review suggestions across all users in your tenant, navigate to the **Users Table** tab and click the **Link Tips** icon to the right of the search bar

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FYITpmRrzvkN6Tpg887jx%2FScreenshot%202024-08-20%20at%2012.31.00%E2%80%AFPM.png?alt=media&#x26;token=e2138447-97e3-4b97-bc52-bb2ce426de52" alt="" width="563"><figcaption></figcaption></figure>

2. Clicking the **Link Tips** icon will open a modal with a handful of accounts across your tenant that may possibly be the same user because these users have either the same **exact user name** or **employee ID**

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FGJ63tiUzSxz7e9ovzW6F%2FScreenshot%202024-08-20%20at%2012.33.54%E2%80%AFPM.png?alt=media&#x26;token=c3b32663-1c35-4392-a09f-c7be628c3d6e" alt="" width="563"><figcaption></figcaption></figure>

3. In the modal, review the user linkage suggestions to determine if the suggestions should be accepted. If the users suggested are indeed the same person, select **Link** to link the specified users to each other
4. If the suggested users are *not* the same person, select **Reject** and the specific suggestion will never re-appear. If you are *unsure* if the users are the same person, or just want to review the suggestion later, select **Skip for now** which will snooze the suggestion for a few days so it can be re-reviewed at a later date.&#x20;
   1. If you want to look more closely at a user to determine if it may be the same person, select the **Open in New Tab** icon next to each user's user name&#x20;
5. Click **Confirm Linkage** to save your selections
6. Once you have linked a set of users, the linkages will appear in the **Linked Users** widget at the bottom of the User360 Overview tab for a specified user, You can review existing linkages or [remove linkages](#removing-account-linkages) from this view

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2F9saiMEWc004nSMO8E1U2%2FScreenshot%202024-08-20%20at%201.51.01%E2%80%AFPM.png?alt=media&#x26;token=1ad103cc-7ada-4502-b60c-c3732155a98e" alt="" width="563"><figcaption></figcaption></figure>

7. You can also see the number of users linked to a specific user in the tag next to the user's name on the Overview Tab and in the dropdown under the User's name in the top right

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FL5jtpkN1g3QvUsz7Lo7L%2FScreenshot%202024-08-20%20at%201.55.32%E2%80%AFPM.png?alt=media&#x26;token=972a27f9-ea50-48a0-a709-53497708ee3f" alt=""><figcaption></figcaption></figure>

#### **Via a specific User's Overview Tab**

1. Navigate to a specific user's User360 Overview Tab. If there are user linkage suggestions available for the selected user, you will see a yellow banner indicating that there are user linkage suggestions to review. *If there is no banner* for the selected user it means there are *no* linkage suggestions available for this user

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FGkuwCsvLdNHn0mMAz2I5%2FScreenshot%202024-08-20%20at%2012.34.14%E2%80%AFPM.png?alt=media&#x26;token=76efbf4b-15e5-4025-9c6c-5803fb04b148" alt=""><figcaption></figcaption></figure>

2. Click **Review** to open the modal where you can review the linkage suggestions for the selected user, or click **Dismiss** to remove the banner for the duration of your session
3. In the modal, review the user linkage suggestions to determine if the suggestions should be accepted. If the users suggested are indeed the same person, select **Link** to link the specified users to each other

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FGiIKrKWWW7UHRu120amU%2FScreenshot%202024-08-20%20at%201.42.44%E2%80%AFPM.png?alt=media&#x26;token=2f157896-3bb2-4bf0-b7f7-856c1136f634" alt=""><figcaption></figcaption></figure>

4. If the suggested users are *not* the same person, select **Reject** and the specific suggestion will never re-appear. If you are *unsure* if the users are the same person, or just want to review the suggestion later, select **Skip for now** which will snooze the suggestion for a few days so it can be re-reviewed at a later date.&#x20;
   1. If you want to look more closely at a user to determine if it may be the same person, select the **Open in New Tab** icon next to each user's user name&#x20;
5. Click **Confirm Linkage** to save your selections
6. Once you have linked a set of users, the linkages will appear in the **Linked Users** widget at the bottom of the User360 Overview tab for that user (See Step 6 above in [Via the Users Table](#via-the-users-table) for screenshot). You can review existing linkages or [remove linkages](#removing-account-linkages) from this view
7. You can also see the number of users linked to a specific user in the tag next to the user's name on the Overview Tab and in the dropdown under the User's name in the top right (see Step 7 above in [Via the Users Table](#via-the-users-table) for screenshot)

## Removing Account Linkages

Accounts can be unlinked from the Linked Users tile on one of the user's account Overview tab. Click the **. . .** button on the right of the row for the user you want to unlink, and select **Unlink from all** to remove the user in that row from its link to the user who's page you are on

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FRNkA77oxULIO1mn2NZYX%2FLink%20users%205%202023-06-16_15-26-12.png?alt=media&#x26;token=4497cbe3-a907-42ec-a410-ea9db8131cae" alt=""><figcaption></figcaption></figure>

## Filtering for Linked Accounts

In the main Users page, you can use the Linked Users filter on the left bar to find just users with an existing account linkage. &#x20;

Note: a small Link icon also appears next to the names of users who have been linked to other users

<figure><img src="https://582105988-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FqPSBzsjxd7KYg9DNVZ4l%2Fuploads%2FjTQyWZ5HFXAo07HjIB9m%2FLink%20users%204%202023-06-16_15-26-12.png?alt=media&#x26;token=8353d910-c78a-4eb3-82a8-b0412910077f" alt=""><figcaption></figcaption></figure>
