Logging in as a Tenant Administrator

12 min

Preparing to Login

As a Tenant Admin, you can configure Ivanti Neurons for Zero Trust Access (nZTA) to support the Gateways, users, devices, policies and resources that are required for your organization’s nZTA implementation.

To log into the Controller, you require a Tenant Admin login.

All Tenant Admin accounts are set up by the Ivanti DevOps team. Once your Tenant Admin account has been created, you will receive an email which describes how to log into the Controller as a Tenant Admin.

You can then proceed to login to the Controller, see Logging into the Controller as a Tenant Admin.

Logging into the Controller as a Tenant Admin

Before you can log in as a Tenant Admin, you will receive an email from the Ivanti DevOps team. This email contains:

Your Tenant Admin user name.

Your password.

The nZTA domain. That is, the FQDN of the Controller.

A hyperlink to start the login process.

To log into your Tenant Admin account:

Click the hyperlink in your email. The administrator login page appears.

Tenant Admin Login Page

The idle timeout is 10 minutes.

The session timeout is 60 minutes.

To configure Admin session timeout values, see Configuring Session Timeouts.

If nZTA requests it, specify a new password for your account.

Once this procedure is complete, you access the nZTA graphical interface as an admin user.

The graphical user elements that appear depend on your configured state.

When you log in for the first time, and until nZTA is minimally configured, a Welcome dialog appears, which leads to the Secure Access Setup (Onboarding) wizard. See Working with the Onboarding Wizard.

When you log into a configured system, the nZTA Network Overview page appears, see Viewing the nZTA Network Overview.

To reset a forgotten password, click FORGOT PASSWORD. This link presents a credentials form through which you enter a Username and Email address. If the entered credentials match a registered administrator account, nZTA emails a password reset link to the entered address allowing the recipient to create a new password.

Viewing the nZTA Network Overview

After you log in to the Tenant Admin Portal following successful completion of the Onboarding Wizard, nZTA displays the Network Overview page. This page provides an overview of user and service activity across your enterprise.

The Network Overview Page

To return to this page any time, click the Insights menu icon in the nZTA menu and select Overview. Alternatively, click the banner at the top.

From this page, you can view and configure all functions and capabilities allowed through your subscription and role. Using the nZTA menu at the left-hand side, choose from:

The Show/Hide menu icon, providing the ability to show or collapse the nZTA menu tree:

Showing or hiding the nZTA menu system

The Insights menu icon, providing access to the analytics and monitoring components of the nZTA portal:

Accessing the Insight menu To learn more about the functionality offered by this menu, see Using the Insights Menu to Monitor User Activity and Service Usage.

The Secure Access menu icon, providing access to configure the individual components that comprise your Secure Access Policies:

Accessing the Secure Access menu

The Administration menu icon, providing access to administrative functions related to your nZTA subscription:

Accessing the Administration menu

The chapters in this guide cover each of these functions in detail.

Changing the UI Theme

nZTA offers two themes for your UI display:

Light theme:

The Network Overview Page - light theme

Dark theme:

The Network Overview Page - dark theme

To change the current theme, which remains in place through subsequent logins, use the Settings menu:

Changing the UI theme

Through the Color Scheme panel (indicated), click Light or Dark to switch between themes.

Setting the Timezone

To configure the default timezone for this admin login account, use the Settings menu:

Configuring the default timezone

Choose a timezone in the provided drop-down selector, then click Apply.

The configured timezone affects the display of data on all Insights pages, and each admin login account within a tenant deployment has their own specific timezone configuration. Changes to the timezone persist across login sessions, and the default setting is UTC (Coordinated Universal Time).

The current timezone can be observed through the date-time selector at the top of each Insights page.

Changing the timezone can affect the data displayed in each chart or graph. For example, a recently-observed non-compliance event involving a client device in the GMT timezone that appears in the Last Hour view (when using GMT (UTC + 00:00) as your configured timezone) might then only appear in the Last X Hours view when you switch your timezone to IST (UTC+05:30).

Configuring Session Timeouts

To configure timeout values for admin and user sessions, use the Settings menu:

Configuring timeout values for admin and user sessions

Through the Session Settings panel (indicated), you can set the following timeout values:

Admin Idle Timeout: the time, in minutes, after which the admin login session to the Tenant Admin Portal times out due to inactivity. (default: 10)

Admin Max Session Length: the time, in minutes, after which the admin login session to the Tenant Admin Portal ends and must be re-authenticated. (default: 60)

User Idle Timeout: the time, in minutes, after which the user login session to nZTA times out due to inactivity. (default: 60)

User Max Session Length: the time, in minutes, after which the login session to nZTA ends and must be re-authenticated. (default: 720)

To apply your changes, click APPLY.

To use these settings, your configured nZTA Gateways must all meet minimum version requirements for session control. nZTA disables the panel and displays a warning message if this is not the case.

To learn more about user sessions and the effect of configured timeouts, see Using Ivanti Secure Access Client with nZTA.

Resetting All Filters and Selections

Each page in the Insights menu allows data filtering, enabling you to observe and monitor only the analytics and log data you want. Each filter or selection feature includes its own reset to default value option. To learn more about the Insights menu and the analytics capabilities of nZTA, see Using the Insights Menu to Monitor User Activity and Service Usage.

Should you want to reset all filters and data selection criteria across the Tenant Admin Portal in one go, use the Settings menu:

Resetting all filters and data selection criteria across the Tenant Admin Portal

Through the Filter Reset panel, you can remove all filters and data selection criteria immediately, returning each page to its default view. Each admin user stores filters and selections separately, so this function affects the current user only.

To activate, enable Set Filters to default, then select APPLY.

Logging out of the Controller

To log out of the nZTA Tenant Admin Portal and end the current session, click the Profile icon and select Logout.