Skip to main content

Enable Persona Switching

Persona switching enables individuals with multiple Person objects to authenticate using different identities and switch between them during a session. This is particularly useful for users with different responsibilities across offices or those requiring separate standard and privileged access personas.

Understanding Persona Switching​

EmpowerID's Core Identity feature links multiple Person objects for the same individual. When you authenticate using a Core Identity, you can:

  • Choose which linked Person identity to use at login
  • Switch between Person identities during your session without re-authenticating
  • Maintain separate access levels and permissions for each persona

The Core Identity is automatically set by the system when Person objects are linked.

Use Case

Persona switching is ideal for administrators who need both standard user access and elevated admin access, or for individuals who work across multiple offices with different access requirements.

Prerequisites​

  • Administrative access to manage Person security settings
  • Multiple Person objects created for the individual (linked to the same Core Identity)
  • See Set Up Core Identities for information on linking Person objects

Configure Authorization Settings​

Persona switching requires bidirectional authorization between Person identities. You must configure both:

  1. Which personas a Person can log in as
  2. Which people are authorized to log in as a specific Person

Set Authorized to Login As​

Configure which other Person identities a user can authenticate as:

  1. Navigate to the View or View One page for the Person using one of these methods:
    • Use the Global search bar (quickest method)
    • Navigate through the Find Person page
  2. Expand the Roles, Accounts and Login Security accordion.
  3. Click Edit in the Authorized to login as pane. Authorized to login as edit link
  4. In the Search field, enter the name of the Person identity this user should be authorized to log in as.
  5. Click the tile for the Person identity. Select authorized Person
  6. Click Save. Save authorization
    A successful Execution Summary message confirms the configuration. Success confirmation

Set People Authorized to Login As This Person​

Configure which people can authenticate as a specific Person identity:

  1. Navigate to the View or View One page for the target Person identity.
  2. Expand the Roles, Accounts and Login Security accordion.
  3. Click Edit in the People Authorized to Login as This Person pane. People authorized to login as this person
  4. In the Search field, enter the name of the Person identity who should be authorized to log in as this Person.
  5. Click the tile for the Person identity. Select authorized Person
  6. Click Save. Save authorization
    A successful Execution Summary message confirms the configuration. Success confirmation

Verify Persona Switching​

  1. Log in to EmpowerID using credentials for a Person with persona switching enabled.
  2. After authentication, you should see options to select from multiple linked Person identities. Persona selection at login
  3. Select the desired persona to continue.

Results​

  • The Person can authenticate using their Core Identity and select from linked Person objects
  • Different access levels and permissions apply based on the selected persona
  • Users can switch personas during their session without re-authenticating
  • Authorization relationships are bidirectional (both personas must authorize the relationship)
  • Persona switching actions are audited in EmpowerID logs
Security Consideration

Persona switching requires careful planning. Ensure that authorization relationships align with your organization's security policies and segregation of duties requirements.