Using the Vendor Logins page

The vendor logins page can be used to track access to your Oomnitza instance by Oomnitza Support and Implementation teams. You can select Enable vendor users access in your instance to enable support to troubleshoot an issue and then quickly disable access, once the work is complete. For clarity and peace of mind, vendors that log in to your instance are required to complete a Vendor Access Tool form, with the information captured in the tool presented in a readable format on the Vendor logins page. 

Fig: Vendor Login page

1. Vendor Logins menu, available in Configuration > Security. Users need "Write" Configuration permissions to manage the content of this menu.
2. Filter. Use the filter to filter the Vendor Log by Time or Users.
3. Vendor Logins list. Displays the information captured in the Vendor Access Tool when the user logs in. This includes the:
   1. Login date
   2. User. 
   3. Role. The role selected by the vendor in the Vendor Access Tool form when they log in
   4. IP Address. The IP address of the vendor.
   5. Reason. The reason supplied by the vendor in the Vendor Access Tool form.
   6. Description. The description supplied by the vendor in the Vendor Access Tool form.
4. Toggle display/access.
   1. Enable vendor users' access. Set to active to enable access to your instance by Oomnitza Support and Implementation teams. Vendors are users who authenticated authorized Oomnitza users (with an Oomnitza email domain). When you use this feature, it sets the global variable system.disable_oomnitza_vendor_access to true or false in Configuration > General > Global settings. For further information see Global system settings.
   2. Display vendor users among other users. Set to active to display vendor users in the People module. When you use this feature, it sets the global variable system.display.oomnitza_users to true or false in Configuration > General > Global settings. 
5. Export to XLSX. Click the icon and then click Download XLSX to download the contents of the log locally.

Fig: Vendor Login flow

Security

Oomnitza takes the security of its customers very seriously and does not access customers' data unless there is a specified purpose, usually for support purposes. The authorized employee that accesses the Oomnitza instance is tracked internally and is immediately archived across all instances once they exit the company to ensure proper off-boarding.