Setting Up Organization Accounts

Setting Up Organization Accounts

After the organization account is created, the Org Admin can access the Organization Settings page to manage organization information and configure authentication requirements, feature controls, licenses, and integrations for Lenovo Device Orchestration (LDO).

1. Go to Configuration & Settings > Organization Settings.
2. Review and configure the settings described in the following sections.
To edit a setting, click the Edit button , make the required changes, and then click Save.

Profile Tab

The Profile tab contains the organization's basic information, including the Organization ID, Domain URL, Display Name, Organization Phone and Language.

Review this information and update as needed. 

Authentication Tab

Use the Authentication tab to configure authentication requirements for users in the organization.

Multi Factor Authentication Settings

Under Multi Factor Authentication Settings, select one of the following options: 
  1. Required to enforce multi-factor authentication (MFA) for all users when signing in for the first time or after resetting their MFA settings.
  2. Optional to make MFA optional for users, who can enable MFA from their user profile. For detailed information, read Editing Your Profile.

User PIN policy

The user PIN policy allows users to restore sessions using a PIN instead of completing the full authentication process each time.
  1. Under User PIN Policy, select the PIN expiration period.
  2. Enable or disable reminder notifications.
  3. Save the changes.

Authentication Provider

Allows administrators to configure Single Sign-On (SSO) by using an identity provider such as Lenovo ID, Microsoft Entra ID, or another supported provider. 
To change the current provider:
  1. Click Change provider.
  2. Check your email as indicated in the information message.
  3. Click Next.
  4. Select the new authentication provider from the list.
  5. Enter the Client ID and Client Secret.
  6. Upload the identity provider (IdP) configuration file.
  7. Click Next.
  8. Complete the authentication provider configuration. 
Use the selected authentication provider the next time you sign in to the portal.

Feature Controls Tab

Device Hardware Fingerprinting Enrollment

Enables hardware fingerprinting for supported Windows and Linux devices, allowing them to be identified and managed in the portal even after a factory reset.

Click the small arrow  next to About Strict and Loose Matching to view detailed information about each option, and change the option as needed. 

Quick Remedy Filter

When enabled, Quick Remedy icons are displayed in Dashboard widgets. Clicking an icon filters predicted crash results associated with that Quick Remedy.

Licenses Tab

Lenovo Device Orchestration uses a device-based SaaS licensing model. Devices can be onboarded and provisioned without a license, but an active license is required to access the full set of LDO management capabilities.

LDO offers multiple license types, and each type includes a different set of features. 

Use this page to review license usage, monitor available capacity, verify license status, and manage license assignments. You can also access the Assignments view to see which devices are associated with a selected license.

For detailed information about assigning, removing, renewing, and replacing trial licenses with commercial licenses, see Assigning and Managing Licenses.

Connectors Tab

The Connectors page allows you to configure and manage integrations with external platforms used by Lenovo Device Orchestration (LDO) and ThinkShield Firmware Assurance (TSFA). From this page, you can add, edit, or remove connector configurations.
Available connectors:
  1. Microsoft Intune – Imports groups from Intune and enables device onboarding through Intune. For more information, see Configuring Microsoft Intune Connector.
  2. Google Workspace – Imports ChromeOS devices from the Google Admin Console. For more information, see Configuring Google Workspace Integration.
  3. SentinelOne – Shares TSFA firmware event data with SentinelOne as part of ThinkShield XDR Firmware Intelligence. For more information, see Configuring SentinelOne Connector.