Registering a new user on-premises 

---

In order to provision a user in a hybrid environment, the user must be registered in an on-premises IBM® Lotus® Domino® directory. If a user you are provisioning is new at your company, perform the steps in this procedure to register the user on-premises.

Before you begin

To apply a policy to the user so that the policy is in effect when the user is provisioned for IBM SmartCloud™ Notes®, create an explicit policy before continuing. Then select the policy during user registration. If you do not apply a policy during user registration, you can apply it later. For more information, see Using administrative policies.

The Domino directory in which you register the user must be configured as a synchronized directory that is used for user provisioning. For more information, see Configuring directory synchronization.

Procedure

1. From an on-premises Domino Administrator client, open a server.
2. Click the tab People & Groups.
3. In the Tools panel, click People -> Register.
4. Click Certifier ID and select the certifier ID to use to certify the user.
   
Note: There must be a trust relationship between this certifier and the one you provided to certify your mail servers. You can use the CA Process rather than select the certifier ID file.

5. Complete the following fields in the Basics tab of the Register Person window.
   

Field	Value
Registration Server	Select a server in which to register the user. The domain Domino directory for this server must be configured as a synchronized directory that is used for user provisioning.
First name, Middle name, Last name	Specify the user’s name.
Short name	The short name has no effect on the names of service users.
Password	Specify a password for the Lotus Notes® ID.
Password Options	Specify the following values. Password Quality Scale Encryption Strength Set internet password (optional). The service does not use the Internet password. However, it may be required for access to on-premises HTTP applications.
Mail system	Select Lotus Notes.
Explicit policy	(Optional) Select an explicit policy to apply to the user. Organizational policies are not supported.
Enable roaming for this person	Do not select this option. Roaming is not supported.
Create a Notes ID for this person	Select.



6. Select the Advanced box in the Register Person window.
   
7. Click Mail and complete the fields displayed to create a temporary on-premises mail file. You are required to create a temporary mail file on-premises, even though the mail file will not be used. When the user is provisioned for the service, a new mail file is created in the service. Make a note of the location of this temporary mail file; after user provisioning is complete you can delete it.
8. Click Address and complete the fields described in the following table.
   

Field	Value to specify
Internet address	The user’s Internet mail address, for example, sdaryn@renovations.com. The address also becomes the service log on name.
Internet domain	The domain portion of the user’s Internet address, for example, renovations.com. The domain must be one that the service has verified.
Address name format; Separator	Select options to determine the format of the Internet address. ShortName is a commonly used format.



9. Click ID info and complete the fields described in the following table.
   

Field	Value to specify
Create a Notes ID for this person	Select this option.
Certifier ID	Confirm the certify to use to create the ID. There must be a trust relationship between this certifier and the certifier you provided to certify your mail servers in the service.
Public key specification	Select one of the listed specifications.
License type	Select North American or International. The license type determines the type of ID file created and affects encryption when sending and receiving mail and encrypting data. North American is the stronger of the two types.
Location for storing user ID	Select In Notes ID vault if you use an on-premises ID vault. If you select this option, the ID can be downloaded to a Lotus Notes client automatically when the client is set up to connect to the service. Otherwise, you must provide the user the ID file. Note that after the user sets up a Lotus Notes client to connect to the service, the ID vault in the service, not the on-premises ID vault, is used for ID and password recovery.



10. Click Groups and assign the user to groups in the Domino directory, as desired.
11. Click the green check mark to add the user to the registration queue.
12. Select the Registration Queue and click Register.
    

Results

A Person document for the user is added to the Domino directory of the registration server. After the Person document replicates to the service during directory synchronization, the User Provisioning window of SmartCloud Notes Administration shows the user name. A company administrator can then provision the user for the service.

Parent topic: Adding new users in a hybrid environment
Next topic: Provisioning users in a hybrid environment