Skip to content
Identity and Access Management

Users

A user in the Trimble ecosystem, commonly referred to as a “TID User” or “Trimble ID”, represents an individual identified by an email address or a preferred username. Information about the user is stored within the Trimble system and is crucial for ensuring security, compliance, access control, and accountability. Due to privacy expectations, access to users data is restricted.

User and Account Association

IAM recommends associating users with at least one account, though this may not be necessary in all scenarios. This relationship serves as the foundation for managing access and identity across various applications and services within the Trimble ecosystem, facilitating:

  • Seamless User Experience: Enables users to transition smoothly between Trimble applications.
  • Unified Data Access: Breaks down data silos for consistent access across workflows and applications.

Users can be associated with multiple accounts, with one designated as the default account. Additionally, users can have more than one role for an account, providing the necessary privileges.

User Signup

In the Trimble ecosystem, a user sign-up can be through a few distinct processes:

  • Direct Signup: Users can create a Trimble ID by registering with their email address on the Trimble Identity sign-up page. This process involves entering personal details and verifying the email address.

  • Invitation Email: A user can be invited using their email address. When the invitation is initiated, a Trimble Identity UUID is reserved for the user. The invitation email includes a link that the recipient must follow to complete the user registration process, ensuring the user consent and verifies their email address.

  • Federation and Social Login: Users are also registered through Trimble Identity’s federation for Trimble enterprise customers who have integrated their identity provider. Users who log in through a social login provider in Trimble Identity are also provisioned in IAM. This allows users to sign in with existing credentials from other services, streamlining the user registration and account association. Identity Federation is documented in detail here.

  • Users without Email: Users can also be created without an email address, identified uniquely by a combination of a shortcode (representing the account) and a preferred username. These users do not require an invitation. This is particularly useful for users who need to access Trimble services but do not require an email. These users are intended to be provided with less privileges compared with users with email. Additional information can be found here.

Unified Administration and Trimble Identity Login

Account administrators can manage different classes of users, whether they have email addresses or not. All Trimble identities, regardless of type, use the same sign-in screen, and SSO sessions are valid across different applications.

Features

For developers and administrators, Trimble provides APIs to programmatically invite users and also create user accounts without emails. This is particularly useful for integrating Trimble services into their applications or automating the user provisioning process.

  • View Users: Retrieve a list of different classes of users within an account, including name, email addresses, roles, localization attributes like country, language, and metadata.
  • Provision Users: Provision new users within an account by sending an invitation to the new user’s email address. The invitation process ensures appropriate roles and permissions are assigned upon acceptance. The users without email addresses are added without invitation.
  • Deprovision Users: Remove existing users from an account, revoking all access rights to ensure they can no longer access any resources within the particular account.
  • Update Users: Modify a limited set of attributes of users.

Trimble also allows the creation of test accounts for development and testing purposes. These accounts are typically created with a specific email format and are not part of the Trimble Okta federation, simulating the experience of non-federated customers.