Clever IDM Enterprise Product Guide

Are there recommendations for naming conventions for staff and student data to other systems?

Clever IDM Enterprise provides three options for user account naming, and the District Administrator chooses the one that suits the district's needs during the initial setup.

Can passwords be changed in the Clever portal and still propagate across systems?

If Clever has been configured to use Active Directory for authentication, then users can use the Clever reset password function available in the Clever portal and Clever IDM Enterprise will sync that password with Microsoft O365 and G-Suite.

How does the Clever IDM Enterprise product check for duplication with emails or usernames?

Clever IDM Enterprise checks for a duplicate username already configured in the system and appends a counter, beginning with the number 2, to the end of new usernames as relevant. This checks for errors before saving.

Can OUs be added within Clever IDM Enterprise, and can they be modified, or do they have to be created in Google?

Clever IDM Enterprise does not perform any OU creation in the system. District Administrators would need to create the OU in Google.

Can we sync to multiple platforms?

Clever IDM Enterprise syncs user accounts between Clever, Active Directory, Microsoft Office 365, and Google Workspace.

Does Clever IDM Enterprise help with the assigning of Microsoft licenses?

Yes. Clever IDM Enterprise assigns Microsoft licenses based on the available licenses in the Microsoft tenant. Clever IDM Enterprise also allows for Disable Plans for more granular license control.

Is there a limit on how many times Clever IDM Enterprise can sync?

Clever IDM Enterprise to Clever syncs changes every two hours and Clever IDM Enterprise to Active Directory, Microsoft O365, and Google syncs every five minutes. This is not configurable. New accounts will only sync after they have been uploaded into Clever through the District Files.

Can I disable accounts? For example, if a teacher needs access revoked immediately from Google or Microsoft O365.

Yes. To disable an account, a District Administrator selects the account from the People module in Clever IDM Enterprise and chooses the Disable action with the Override flag selected.

If I change a password in Google or Microsoft O365, does it sync to Active Directory and Clever?

This is not currently supported. Password changes originating in Google and Microsoft O365 are not synchronized by Clever IDM Enterprise.

What if I have multiple domains - one for students and one for staff?

Multiple domains within the same Google or Microsoft O365 are supported. Multiple Active Directory domains are not supported.

Is Clever IDM Enterprise a password management tool?

No. Clever IDM Enterprise is an Identity Lifecycle Solution that enables users to set and reset their passwords with Active Directory, Microsoft O365, and Google. Teachers and Staff users are able to reset their passwords through the Clever IDM Enterprise portal; however, Teachers are expected to use the Clever portal to reset their students' passwords.

Do we get a list of accounts that were created or accounts that showed an error in the process?

Yes. There is a daily digest report sent to the District Administrator's email and is accessible via the Files module in the Clever IDM Enterprise portal.

For passwords, what are the options for lower grades? These students need as simple of a solution as possible.

The out-of-the-box Clever IDM Enterprise password policy has been configured to address most Active Directory password complexity requirements. District Administrators can change or add password policies in Clever IDM Enterprise as necessary. Clever also supports the use of badges for simplified user logins.

Customers currently pull passwords back from Clever into Aeries for teachers to access. Is this still doable?

Clever IDM Enterprise does not replace any existing Clever functionality that exists today.

Are there any security concerns with connecting via HTTP instead of HTTPS for the Active Directory password filter installation?

Clever IDM Enterprise and the Active Directory password filter will always redirect to HTTPS.

Can Clever pull from two different databases?

Yes. Go to Clever Support for assistance with this.

If Students are given a default password through Clever IDM Enterprise, can the student then reset their password through the Clever portal themselves?

Students should be able to reset passwords in Clever if the District Administrator has allowed it. Otherwise, Teachers can reset Student passwords in Clever.

If the SIS system pushes an email address into Clever in a format other than our mappings, will this be changed through Clever IDM Enterprise?

No. Most, if not all, customers are syncing information from their SIS and HRMS into Clever. Keep in mind that an email and username are not required. If they do not push those for new users, Clever IDM Enterprise will automatically generate an email and a username for that user.