ShipStream Knowledge Base
Developer Center Learn More
System Administration

User Management

Within ShipStream there are two types of users: Organization Users (or just "Users") and Client Users. The Client Users' access to data and features is limited to the data of a single Merchant and the functionality that a client of a 3PL would require as opposed to the employees of a 3PL organization which can access data from all merchants and functionality pertaining to warehouse operations.

Practicing the Principle of Least Privilege is recommended and to help you do this, you can create any number of User Roles and User Groups which can then be assigned to your users to limit their access as needed.

Adding Users

  1. Navigate to System > Users.
  2. Click on Add New User at the top right of the page.

  3. Once you’ve filled out the required fields, use Create Password to choose how the new user gets a password:

    • Send Reset Link - Email the user a link to set their own password.
    • Specified - Enter the password yourself in the two fields that appear.
    • No Password - Create the account without a password. The user signs in with Social Login (Google or Microsoft, whichever is enabled) or, when Login via Badge is enabled, a badge. If Required Domains is set, a user whose email is not in it can sign in with Social Login only when Allow External Users is enabled. The note under the field lists the sign-in methods currently available.

    When Password Login is Disabled for Linked Accounts and Google or Microsoft login is enabled, No Password is selected by default. When it is Disabled, the Create Password field is hidden and every new user is created without a password.

    If you choose Send Reset Link for a user who is not allowed to sign in with a password (for example, because Force SSO for Domains covers their email domain), ShipStream creates the account without a password, sends no email, and shows a notice listing how the user can sign in instead.
  4. The "Login via Badge" feature allows for a user to scan a badge code to login without a password.

  5. Click the User Role tab in the left sidebar and choose a User Role for the user.

    If you don’t have the desired Role setup yet, you will need to do that by navigating to System > Users then clicking User Roles.
  6. Click Save User.

Adding Client Users

  1. Navigate to System > Users then click Client Users at the top right of the page.
  2. Click on Add New Client User at the top right of the page.
  3. Once you’ve filled out the required fields, use Create Password to either send the user a reset password link (Send Reset Link) or enter a password for them (Specified). Client Users always need a password, so No Password is not offered, Specified requires a password, and Password Login restrictions do not apply to them.
  4. Click the User Role tab in the left sidebar and choose a Client User Role for the user.
If you don’t have the desired Role setup yet, you will need to do that by navigating to System > Users then clicking Client Users and then Client User Roles.
  1. Click Save User.

Editing Users / Client Users

Organization Users with a role containing the System > Permissions > Users permission may edit both Organization Users and Client Users. Client Users with the same permission may, of course, only manage Client Users belonging to the same Merchant.

If a user needs a password reset, the most secure way to accomplish this is to send a password reset link to their email address. This can be done with one click by clicking Send Reset Link on the “Edit User” page. An email with instructions will be immediately sent to the user's email address. This method ensures that a user's password is not persisted in an email which could be compromised at some point in the future.

When Password Login or Force SSO for Domains does not allow a user to sign in with a password, the New Password and Password Confirmation fields are replaced by a note that password login is disabled for this user and how they sign in instead, and the Send Reset Link button is hidden. Super-admins and Client Users always keep both.

Deactivating or reactivating a user, or changing their password (including through a reset link), Username or Email, signs them out of every browser and scanner where they are signed in. Each of those sessions returns to the login page on its next click. When users change their own password, Username or Email, the session they made the change from stays signed in.

Social Identities

If Social Login is enabled, the bottom of the User Information tab shows the Google or Microsoft accounts linked to the user. Each row lists the Provider, the Provider Email, and the date the identity was first linked. Click Unlink on a row to remove that identity. On your own User page, Unlink follows the same rules as on My Account. Unlinking does not stop the user from signing in with that provider: their next sign-in with it links the identity again, as long as the provider email still matches the email on their ShipStream User. When Password Login is Disabled for Linked Accounts, unlinking a user's last identity for an enabled provider lets them sign in with their password again until that next sign-in. A user without a password can then sign in with Google or Microsoft only if the provider email matches their ShipStream email. When unlinking an identity changes how the user can sign in, the confirmation message explains the consequence before you continue.

User Mass Actions

The Users grid allows for mass actions to be applied to any number of selected users using the checkbox on the left side of each row in the grid view. With one or more users checked, you can use the “Actions” drop-down menu and choose to:

  • Delete PIN Codes - Reset the PIN of the selected users
  • Reset Badge Codes - Generate new badge codes for the selected users
  • Login via Badge - Set whether users are allowed to login with a Badge Code
  • Export Badge Codes - Export Badge Codes to a CSV file
    • This action requires the Export Badge Codes permission
  • Assign to Group - Assign the selected users to the selected User Group.

Warehouses

User Roles