Setting Up Organization Accounts

Setting Up Organization Accounts

Accessing Your Account

When your organization's portal is created, a single administrative account will be created. The IT Owner (Org Admin) specified to Lenovo at the time of sale will receive a Lenovo Device Orchestration (LDO) e-mail indicating that he or she has been granted access to your organization. Clicking on the link will open the Sign on page where he or she can log in to LDO as an Organization Administrator.  With this administrative account, org admins can configure the portal, invite users, and add devices.


Setting Up an Organization

To access your organization's account details, navigate to Configuration & Settings > Organization Account in the left pane.

Profile Tab

This tab displays the organization account’s profile and serves as a hub for the Org Admin and IT Admin to manage the organization's main information. To edit the organization’s information, click the Edit button at the top-right corner of the page.

Authentication Tab

Allows IT Admin and Org Admin to configure MFA settings for all users at the organization level.

Multi Factor Authenticator Settings

Select an option from the dropdown list: 
  1. Required – If this option is selected, all users in the organization must set up MFA when signing in for the first time or after resetting their MFA settings. MFA applies only to Lenovo ID. Users cannot modify this setting in their profiles.
  2. Optional – If this option is selected, users will not be prompted to set up MFA but can do so from their profile. 

Authentication Provider

Allows users to customize their login method by enabling Single Sign-On (SSO) through a partner, such as Lenovo ID, Microsoft Entra ID, or another provider.
To change the current provider:
  1. Click Change provider
  2. Check your email as indicated in the information message.
  3. Click Next.
  4. Select the new authentication provider from the list.
  5. Enter the Client ID and Client Secret.
  6. Upload the file for IDP configuration.
  7. Click Next to complete the customization. Use this option the next time you connect to this solution.

Feature Controls Tab

Device Hardware Fingerprinting Enrollment

Enables hardware fingerprinting for the organization's devices, allowing the Org Admin to efficiently manage them on the Portal, even after a factory reset. This feature applies to Windows and Linux devices.
  1. Click the small arrow next to About Strict and Loose Matching to view detailed information about each option.
  2. Click Edit in the top-right corner of the page.
  3. By default, Strict Matching is selected. If you choose Loose Matching, click Save in the top-right corner to apply the changes.

Enable Quick Remedy Filter

When this button is enabled, the system displays Quick Remedy icons in the Dashboard widgets. Clicking these icons filters the predicted crashes by Quick Remedy.

Licenses Tab

Lenovo Device Orchestration uses a device-based SaaS licensing model. You can purchase licenses through standard Lenovo channels and apply them to UDS or LDO. You can onboard and provision devices without a license, but you can manage them fully in LDO only after you apply a license.

LDO offers multiple license types, and each type includes a different set of features. Licenses can also be either Commercial or Trial.
​
The license name appears on the Configuration & Settings > Organization Account page. After you assign a license, the name also appears in the Device Management > Devices list and on the Device Details page.

For information about assigning and managing licenses, see Assigning and Managing Licenses.

Connectors Tab

The Connectors page allows you to configure and manage integrations with external platforms used by Lenovo Device Orchestration (LDO) and ThinkShield Firmware Assurance (TSFA). From this page, you can add, edit, or remove connector configurations.

Available connectors:
  1. Microsoft Intune – Imports groups from Intune and enables device onboarding through Intune. For more information, see Configuring Microsoft Intune Connector.
  2. Google Workspace – Imports ChromeOS devices from the Google Admin Console. For more information, see Configuring Google Workspace Integration.
  3. SentinelOne – Shares TSFA firmware event data with SentinelOne as part of ThinkShield XDR Firmware Intelligence. For more information, see Configuring SentinelOne Connector.