Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2025-02-21
Steps: Set Up Access for Extended Enterprise Learning

Steps: Set Up Access for Extended Enterprise Learning

You can create security groups within your organization to determine who can:
  • Access learning content.
  • Create and manage extended enterprise learners.
  1. Access the
    Domain Security Policies for Functional Area
     report.
    1. On the
      Functional Area
       prompt, select
      Extended Enterprise for Learning
      .
    2. Select
      Domain Security Policy
      Enable
       from the related actions menu on the security policy for these domains:
      • Manage: Extended Enterprise
      • Self-Service: Extended Enterprise Learning
  2. Create User-Based Security Groups.
    Create user-based security groups for managing external learning users.
  3. Edit Domain Security Policies.
    Configure access for the:
    • All Extended Enterprise Learners security group on the
      Learning Access
       domain in the Learning Core functional area.
    • User-based security groups that you created on the
      Manage: Extended Enterprise
       domain in the Extended Enterprise for Learning functional area.
    Configure access for the Extended Enterprise Learner as Self security group on these domains:
    • Person Data: Personal Photo
       and
      Self-Service: Personal Photo
       in the Personal Data functional area.
    • Self-Service: Certifications
       in the Worker Profile and Skills functional area.
    • Self-Service: Extended Enterprise Learning
       in the Extended Enterprise for Learning functional area.
    • Self Service: Learning
       in the Learning Core functional area.
  4. Assign extended enterprise security groups to perform actions on these business processes in the Learning Core functional area:
    • Drop Learning Enrollment
    • Enroll in Content
    • Manage Lesson
    (Optional) Add the External Learning User as Self security group to the
    Edit My Personal Information
     initiating action on the
    Manage External Learning User
     business process.
  5. Activate Pending Security Policy Changes.
  6. (Optional) Configure segmented security for extended enterprise learners.
  7. Access the
    Edit Tenant Setup - Security
     task.
    Select the
    Email Temporary Password to New Accounts
     check box to ensure that new users receive security emails.
    This is a tenant-wide setting that all applies to all new users, including new workers. In some cases, you can configure individual business processes to avoid sending temporary password emails to all new users. Example: Configure the
    Hire
     business process so that new workers don't get these emails.
    Security:
    Set Up: Tenant Setup - Security
     domain in the System functional area.
  8. When your workers use Single Sign-On (SSO), you can configure an authentication selector that enables external learning users to bypass SSO and sign in with a username and password.
  9. (Optional) Set up multifactor authentication.
    As you configure the authentication policy, select:
    • All External Learning Users
       from the
      Security Group
       prompt on the
      Authentication Ruleset
       grid.
    • One Time Passcode - Email
       from the
      Multi-factor Authentication
       prompt on the same row.
Configure security for extended enterprise affiliation roles.