Installation & Administration
A practical CardIQ administrator checklist for company identity, employees, integrations, lifecycle and security.
1. Create or configure the company. 2. Apply the approved company name, public profile and branding. 3. Verify the company domain where used. 4. Configure Trusted Domains. 5. Create the Company Admin with only the necessary role. 6. Review plan entitlements before enabling workflows.
7. Define employee identity and contact rules. 8. Add employees or use an entitled bulk/directory workflow. 9. Review activation and invitation state. 10. Configure the Public Company Profile and directory. 11. Configure approved signatures and meeting identity features where available. 12. Generate and test employee QR/NFC destinations against the canonical public profile.
13. Configure Microsoft Entra only for entitled companies and required Microsoft permissions. Use scoped preview and controlled sync before lifecycle automation. 14. Configure Entra-based enterprise sign-in where approved. 15. If SCIM Users provisioning is enabled, validate tenant token handling and interoperability in the target environment before production; SCIM Groups/Bulk remain unsupported. 16. Create scoped API keys and signed webhooks only for authorized integrators.
17. Review MFA availability, role boundaries, security alerts, audit records and private logs. 18. Exercise lifecycle outcomes with test identities and validate offboarding across login, public profile, QR/NFC, mobile and API surfaces. 19. Review analytics access and data scope. 20. Complete the operational health checklist in the troubleshooting guide before launch.
Document the approving owner for branding, domains, administrators, integrations and lifecycle actions. Use staging where practical, avoid sharing credentials in tickets or screenshots, and repeat validation after material configuration changes.
Explore the CardIQ platform or review the workflow from verification through identity deactivation.
See how CardIQ works View pricing