Named entities: users, devices, and applications

Among the various defined profile types, users, devices, and applications are named entities. These profile types are the only profile types that can perform an action, which means that they are the actors in the identity and access management workstream. As named entities, these profile types have additional infrastructure to enable Trimble to authenticate and authorize specific profile instances to enable activity by customers and integrators.

• Users. A user, sometimes referred to as “TID User Account” or a “Trimble ID,” represents a physical person with an email address as the basis for uniqueness. Information about the user is stored here. Because of privacy expectations around user data, Profiles offers restricted access to read data about the actively logged in user. If an application needs access to user data outside of an active login session or needs to access other users during that session to enable a feature, please see Accessing user data.
• Devices. Devices are provisioned within profiles directly. Profiles requires a unique combination of a serial number, manufacturer, and model name for each device. Profiles will automatically connect to Trimble Identity v3 to generate the necessary certificates if a “Common Name” is included.
• Applications. An application record is generated from Core Console. Registering your application in Core Console to provide and consume API products also includes your system in the list of applications within Profiles. As part of the setup with Core Console, your application will be configured with the necessary components to authenticate through Trimble Identity v3.