View source for nl:Entity Management


<section begin=EMintro />
<div class="DTC"><center>{{FA|fas fa-users|30px|#1C1C1C}}</div>
The Entity Management console on [https://www.myviewboard.com myviewboard.com] provides centralized administration and setup options for the myViewBoard Entity (such as a school or company). This console is only accessible to users set up as admins. <div class="MobileOnly">Contact your account manager or [https://myviewboard.com/contact/ get in touch with us here] if you require access to this service.</div>
<section end=EMintro />

<div class="DesktopOnly">
{{#lst:MediaWiki:Contactpage-pagetext}}
</div>


==How to open the console==
Before you can set up myViewBoard suite for your organization, you must first be registered for an entity account. This is a service offered to institutions which includes extra services and functionality such as Entity Management and [[myViewBoard Manager]]. 

# Log in to [https://www.myviewboard.com myviewboard.com] with your admin account.
# On the main page, click the Entity Management tile.

<gallery widths="490" heights="290">
File:MyViewBoard.com entity tile highlighted.png|Once logged in, the Entity Management tile is located here.
</gallery>

==Layout and navigation==

<gallery widths="490" heights="350">
File:Entity Management main UI.png|Entity Management user interface after opening the console.
</gallery>
# '''Entity List''' – Enables you to select an entity if you are the admin of multiple entity accounts
# '''Entity Name''' – The name of the currently selected Entity
# '''Entity Main Domain''' – The main domain registered to the currently selected Entity
# '''Dashboard''' – Access analytics dashboard for usage statistics 
# '''Subscriptions''' – Access details of any additional add-on subscription services
# '''Domains''' – View and add additional verified domains
# '''Single Sign-On''' – Setup your SSO settings to connect with Microsoft Azure AD, Google G Suite, SAML or SCIM
# '''Users''' – Access your user list, upload CSV files or setup User Sync via SSO
# '''Managed Service Provider''' – provide access to a third party to manage your entity account as entity admin
# '''Software Instances''' – View and manage your installed software instances
# '''Cloud Services''' – Define which cloud services are permitted to integrate with myViewBoard
# '''Bookmarks''' - Customize your myViewBoard Whiteboard embedded browser favorites here.
# '''Manager''' – Access myViewBoard Manager for Device Management of compatible ViewSonic hardware
# '''Firewall Whitelisting''' – View firewall ports and whitelisting requirements
# '''Entity Onboarding Manual''' – Link to setup manual and support materials
# '''Main Window''' – This view changes depending on what is selected from the sidebar
# '''MSI Installer''' – Download the latest MSI installed for myViewBoard Whiteboard for Windows
# '''Install Instructions''' – View instructions for installing myViewBoard Whiteboard for Windows using the MSI file.
# '''myViewBoard Activator''' – myViewBoard Activator app for activating myViewBoard Whiteboard for Android via Google Admin Console


==Before Proceeding==
To successfully setup myViewBoard users and the software suite, there are several things to consider:

* '''Access''' - do you have access to Entity Management and any other required access to setup users and install or deploy the software on your systems?
* '''Admin Rights''' - do you have admin rights to install software and/or access to Microsoft or Google admin for user setup with Single Sign On?
* '''Firewalls''' - do you have the option to setup your firewall to allow myViewBoard access?
* '''Filters''' - do you have any web filters that need to be setup to allow myViewBoard to function?
* '''Whitelisting''' - are you able to whitelist myViewBoard websites and email addresses?

<div class="MobileOnly" style="padding:10px;background-color:#f8f9fa;">
'''Firewalls'''
<br>'''Mandatory Requirement'''
<br>TCP Port 443 (HTTPS): outbound is required for general operation and activation.

'''Requirements for screen sharing'''
:* UDP and TCP port 3478 bidirectional to the WebRTC servers.
:* UDP Ports 50,000-65,535 (RTP/sRTP/RTCP) bidirectional to the WebRTC servers.
''There ports are optional; if blocked, media will be proxied using TURN on port 3478.''


'''Whitelist Emails'''
:*service@myviewboard.com <br>''main automated email for notifications, security, and user account information.
:*letstalk@service.myviewboard.com <br>''myViewBoard Support team helpdesk email''
:*myViewBoard@news.myviewboard.com <br>''myViewBoard news and promotions''


'''Whitelist Domains'''
:*<nowiki>*</nowiki>myviewboard.com <br>''This is required for the web applications ecosystem to function
:*<nowiki>*</nowiki>myviewboard.cloud <br>''This is required for proper functioning of web service resources''
:*myviewboardclips.com <br>''This allows proper functioning of myViewBoard Clips''
:*<nowiki>*</nowiki>firebraseio.com <br>''Used by video and audio streaming features''
:*<nowiki>*</nowiki>amazonaws.com <br>''Used by AWS services

''Please be sure to include <nowiki>*</nowiki> asterisks where shown above.''


'''IP Addresses'''
</br>myViewBoard is hosted on Amazon AWS and uses load balancing, as such the destination IP for the myViewBoard server is subject to change without notice. Therefore, we are unable to provide a fixed IP address for whitelisting purposes.

</div>



<div class="DesktopOnly">
<div class="mw-collapsible mw-collapsed"><div class="mw-collapsible-toggle" style="background-color:#f8f9fa; width:100%; float: none;margin:10px 0 10px 0;border:solid 1px #a2a9b1;" title="Click to expand">
==={{Icon Image|entypo-chevron-down}} Firewalls <span style="float:right;margin-right:5px;">{{Icon Image|entypo-chevron-down}}</span>===
</div><div class="mw-collapsible-content" style="padding:10px;background-color:#f8f9fa;">
'''Mandatory Requirement'''

TCP Port 443 (HTTPS): outbound is required for general operation and activation.


'''Optional Wireless screen sharing requirement'''
* UDP and TCP port 3478 bidirectional to the WebRTC servers.
* UDP Ports 50,000-65,535 (RTP/sRTP/RTCP) bidirectional to the WebRTC servers.
''These ports are optional; if blocked, media will be proxied using TURN on port 3478.''


''The WebRTC protocol is only used for screen sharing. Verify that these ports are open on your network firewall if you wish to use this feature.''
</div></div>


<div class="mw-collapsible mw-collapsed"><div class="mw-collapsible-toggle" style="background-color:#f8f9fa; width:100%; float: none;margin:10px 0 10px 0;border:solid 1px #a2a9b1;" title="Click to expand">
==={{Icon Image|entypo-chevron-down}} Whitelisting <span style="float:right;margin-right:5px;">{{Icon Image|entypo-chevron-down}}</span>===
</div><div class="mw-collapsible-content" style="padding:10px;background-color:#f8f9fa;">
{| class="wikitable"
!colspan="1" style="text-align:left;padding:10px;"|'''Email'''
!colspan="1" style="text-align:left;padding:10px;"|'''Explanation'''
|-
| style="text-align: left;padding:10px;"|service@myviewboard.com
| style="text-align: left;padding:10px;"| main automated email for notifications, security, and user account information
|-
| style="text-align: left;padding:10px;"| letstalk@service.myviewboard.com
| style="text-align: left;padding:10px;"| myViewBoard Support team helpdesk email
|- 
| style="text-align: left;padding:10px;"| myViewBoard@news.myviewboard.com
| style="text-align: left;padding:10px;"| myViewBoard news and promotions
|}


{| class="wikitable"
!colspan="1" style="text-align:left;padding:10px;"|'''Domain'''
!colspan="1" style="text-align:left;padding:10px;"|'''Explanation'''
|-
| style="text-align: left;padding:10px;"| <nowiki>*</nowiki>myviewboard.com
| style="text-align: left;padding:10px;"| This is required for the web applications ecosystem to function
|-
| style="text-align: left;padding:10px;"| <nowiki>*</nowiki>myviewboard.cloud
| style="text-align: left;padding:10px;"| This is required for proper functioning of web service resources
|-
| style="text-align: left;padding:10px;"| myviewboardclips.com  
| style="text-align: left;padding:10px;"| This allows proper functioning of myViewBoard Clips
|-
| style="text-align: left;padding:10px;"| <nowiki>*</nowiki>firebraseio.com 
| style="text-align: left;padding:10px;"| Used by video and audio streaming features
|-
| style="text-align: left;padding:10px;"| <nowiki>*</nowiki>amazonaws.com
| style="text-align: left;padding:10px;"| Used by AWS services
|}
''Please be sure to include asterisks where shown above''
</div></div>



<div class="mw-collapsible mw-collapsed"><div class="mw-collapsible-toggle" style="background-color:#f8f9fa; width:100%; float: none;margin:10px 0 10px 0;border:solid 1px #a2a9b1;" title="Click to expand">
==={{Icon Image|entypo-chevron-down}} IP Addresses <span style="float:right;margin-right:5px;">{{Icon Image|entypo-chevron-down}}</span>===
</div><div class="mw-collapsible-content" style="padding:10px;background-color:#f8f9fa;">
myViewBoard is hosted on Amazon AWS and uses load balancing, as such the destination IP for the myViewBoard server is subject to change without notice. Therefore, we are unable to provide a fixed IP address for whitelisting purposes.
</div></div></div>

{{BR}}

==Checking and adding domains==
myViewBoard Entities are tied to specific registered domains. Check the "Domain" section of your Entity Management portal to see which domains are registered to your account.
By default, a single main domain is registered. Please check to make sure your registered domains match with your end user email addresses.
In some cases, you may have been assigned a virtual myViewBoard domain. An example virtual domain name will look like: <code>dnmxntk5mdm4ody0mdqw.at.myviewboard.cloud</code>


If any additional domains are needed, they can be added in the "'''Domains'''" section (#6 in [[Entity_Management#Layout_and_navigation|the above image]]).


To add a new domain, click the [[File:Entity Management Add User in domain tab button.png|55px|link=]] add button. After adding the domain, click the  [[File:Cog button Entity Management.svg|30px|link=]] cog to verify the domain. You can verify by either MX or TXT record.


<!--add images here?-->


==Configure Single Sign-On==
myViewBoard has the option to setup Single Sign-On (SSO) with Microsoft Azure AD, Google G Suite, SAML, and SCIM. You can configure this in the "Single Sign-On" section (#7 in [[Entity_Management#Layout_and_navigation|the above image]]).


<gallery widths="490" heights="300">
File:Entity management SSO configure.png|Navigation for adding a SSO service.
</gallery>

# Use the Single Sign-On Setting drop down menu to select your SSO type. 
# Choose the option to install myViewBoard to your SSO provider.
# Login as the admin to your identity provider to grant access to myViewBoard.
# Confirm to use the Identity Provider with myViewBoard. 


''Following the above steps, your SSO settings should now be setup and show the corresponding Tenant Name or ID''

<!--add images here-->



==Adding users==
Only users within a registered domain can be added. Please make sure the correct domain is setup in the "'''Domains'''" section before attempting user onboarding.


myViewBoard has three options for adding users:
* Automatically using "User Sync" from the Single Sign-On identity provider.
* Manually via a CSV Import.
* Discover Domain-related users outside the entity.


===User Sync via SSO method===
After setting up your Single Sign-On, you will see the option for User Sync.
# Select User Sync
# Sign in with the admin account for your identity provider
# If prompted, allow myViewBoard access to your account
# Choose your desired user list you wish to sync (All Users, Groups, or Units)
# Confirm to Sync your users


===Manual CSV method===
To manually add users to myViewBoard, you can use the provided CSV Template file to import multiple users.
To do this you will need to be able to open a CSV file using software such as Microsoft Excel or Google Sheets.

{{Note-yellow|'''Important note''' Email addresses will only be imported successfully if the email domain matches with a registered domain within the "'''Domains section'''". Please check the email addresses belong to domains that are currently registered with myViewBoard before attempting to upload the CSV file. The example below shows the registered domains within the entity, which will allow for any users within those domains to be added.}}

<gallery widths="490" heights="200">
File:Entity Management Domain List.png|Ensure that email addresses match one of the domains listed in Domains view. 
</gallery>

'''To add users via CSV file:'''
# Go to the "'''Users Section'''" (#8 in [[Entity_Management#Layout_and_navigation|the above image]]).
# Click "'''download template file'''"
# Save and open CSV file in Excel
# Fill in all user details using the example fields
# Save the CSV file
# Click [[File:Entity Management CSV SVG.svg|70px|link=]] CSV Import to upload the file


===Discover Domain-related users outside the entity===
There may be occasion where individual users have already setup a myViewBoard account prior to the entity being established, or scenarios where users have been accidently deleted from the entity being established.

First open the '''Users''' view from the menu on the left, then click [[File:Entity Management Discover domain related users outside the entity.svg|300px|link=]].


===User Sync with Microsoft Azure AD===
To add users:
# First set up Single Sign-On via Microsoft Azure AD. You can do this in the "'''Single Sign-On'''" section of Entity Management (#7 in [[Entity_Management#Layout_and_navigation|the above image]]).
# Choose Azure AD from the drop-down menu
# Choose Sign in with Microsoft
# Login with your Microsoft Admin account
# Choose "'''Use this Azure Directory as Identity Provider'''"
# Click to confirm.


''Your setup is complete when a Tenant Name or ID is displayed with the Azure AD application ID.''
<!--add images here-->


To sync Azure AD users into your myViewBoard Entity user list:
# Navigate to the "'''Users'''" section on the left side menu
# Choose "'''User Sync with Azure AD'''"
# Sign in with Microsoft Azure AD Admin account
# Choose to sync "All Users" or a "Group"
# Click "Keep Previous" to keep any previous users (deselecting this will wipe all existing users during the user sync)
# Click "Apply" to sync the users.
<!--add images here-->


After authorizing myViewBoard with Azure AD, you will find myViewBoard-Connect installed in the Microsoft Azure Portal. This is the service used to sync users.

===User Sync with Google G Suite===
To add users:
# First set up Single Sign-On via Google G Suite. You can do this in the "'''Single Sign-On'''" section of Entity Management (#7 in [[Entity_Management#Layout_and_navigation|the above image]]).
# Choose G Suite from the drop-down menu
# Choose Install myViewBoard to your G Suite
# Login with your Google Admin account
# Choose "'''Use this G Suite as Identity Provider'''"
# Click to confirm.


Your setup is complete when a Tenant Name or ID is displayed.
<!--add images here-->


To sync G Suite users into your myViewBoard Entity user list:
# Navigate to the "'''Users'''" section on the left side menu
# Choose "'''User Sync with G Suite'''"
# Sign in with Google Admin account
# Allow myViewBoard to access your Google Account
# Choose to sync "All User", a "Group", or a "Unit"
# Click "Keep Previous" to keep any previous users (deselecting this will wipe all existing users during the user sync)
# Click "Apply" to sync users.
<!--add images here-->



===User sync with SAML and SCIM===
<div class="toccolours mw-collapsible mw-collapsed" style="background-color:#e6f2ff;width:80%; overflow:auto; float:left;">
'''User Sync with SAML'''
<div class="mw-collapsible-content">
To set up SAML with myViewBoard:
# First set up Single Sign-On via SAML. You can do this in the "'''Single Sign-On'''" section of Entity Management (#7 in [[Entity_Management#Layout_and_navigation|the above image]]).
# Choose '''SAML''' from the drop-down menu
# Fill in SAML URL, Logout Redirect and SAML Certificate
# Use Endpoint Login URL to sign in with SAML verification
# Set Audience URL (Entity ID)
# Set Assertion Consumer Service (ACS URL)
# Set Recipient URL in server settings
# Click to confirm.
<!--add images here-->
</div></div>




<div class="toccolours mw-collapsible mw-collapsed" style="background-color:#e6f2ff;width:80%; overflow:auto; float:left;">
'''User Sync with SCIM'''
<div class="mw-collapsible-content">
To set up SCIM with myViewBoard:
# First set up Single Sign-On via SCIM. You can do this in the "'''Single Sign-On'''" section of Entity Management (#7 in [[Entity_Management#Layout_and_navigation|the above image]]).
# Choose '''SCIM''' from the drop-down menu
# '''Download SCIM Instruction''' and follow steps from the documents
## Sign in to the [https://aad.portal.azure.com/Azure Active Directory admin center]
## Click '''Enterprise applications''' from the left panel
## Click '''New application'''
## Select '''Non-gallery application'''
## Enter a name for your application and then click '''Add''' to create
## In the application management page, click '''Provisioning''' and then click '''Get started'''
## In '''Provisioning Mode''' field, select '''Automatic'''
## Copy the URL and token from myviewboard.com and then paste them in '''Tenant URL''' and '''Secret Token'''
##* Click '''Test Connection''' to have Azure Active Directory try to connect to the SCIM endpoint. If the test fails, error information will be displayed.
##* If the test succeeds, click '''Save''' to save the admin credentials.
## in the '''Mappings''' section, there are two sets of attribute mappings: one for users object and one for groups objects. Select each one to review the attributes that are synchronized from Azure Active Directory to myViewBoard.
## Under '''Settings''', the '''Scope''' field defines which users and groups are synchronized. Select '''Sync only assigned users and groups''' (recommended) to only synchronize the users and groups assigned in the users and groups objects.
## Once your configuration is complete, set the '''Provisioning Status''' to '''On'''.
## Click '''Save''' to start the Azure AD provisioning service and the synchronization will be executed automatically with the defined '''Provisioning interval'''.
<!--add images here-->
</div></div>
{{BR}}


==Managing users==
The initial account created for the entity is an Owner account. This has admin rights and cannot be changed.
For all other users, myViewBoard has two types of roles:
# User: a standard user without access to the Entity Management console.
# Admin: has access to Entity Management to change settings.


These roles can be configured by selecting '''Users''' in the left side menu, and then clicking the drop-down menu in each user row. 
<gallery widths="300" heights="200">
File:Entity Management change user value.png|Change user privileges using the drop down menu in the user section. 
</gallery>

Also in this row there are buttons to [[File:Entity Management Reset Password.svg|120px|link=]] '''Reset Password''' for a user, and [[File:Entity Management Delete user button.svg|60px|link=]] '''Delete''' a user.


Clicking on a user reveals activity logs for that user.
<gallery widths="640" heights="400">
File:Entity Management Login history for Users (1).png|Login History is displayed for each user after clicking on the user.
</gallery>



----

{{nlt:Get_more_information}}

{{DISPLAYTITLE:Entiteits Beheer}}