Manage users
Trustly assigns a Merchant Administrator to the Merchant Portal. This administrator manages and assigns user access.
To help maintain data security, Trustly recommends that you only grant access to users who have an official company domain email address. Do not use personal email addresses.
Trustly may periodically provide the merchant administrator a list of the merchant's users who have access to the Merchant Portal. We may request the merchant administrator to attest that the list contains only authorized users of the Merchant Portal. The merchant administrator must respond to any such requests within 30 days to ensure uninterrupted access to the Merchant Portal.
Available roles
The following table lists the roles available to merchants and the access each role provides.
| Role | Description |
|---|---|
| Merchant Admin | Has full access to the Merchant Portal (can add users). |
| Merchant Full | Has full access to the Merchant Portal, except for user management. |
| Merchant Read Only | Can only view data in the Merchant Portal (cannot edit). |
| Merchant Approve Trxns | A limited merchant user role that only approves transactions. |
| Merchant Refund Trxns | A limited merchant user role that only refunds transactions. |
| Merchant Cancel Trxns | A limited merchant user role that only cancels transactions. |
Authentication types
The merchant's Merchant Portal authorization type determines their authentication method. The following methods are supported:
- Standard: General login information that Trustly creates and sends to users to log in.
- OIDC (OpenID Connect): Single sign-on capabilities through an Okta OIDC configuration with the merchant’s Okta instance.
- SAML (Security Assertion Markup Language): Single sign-on capabilities through an Okta SAML configuration with the merchant’s Okta instance.
Manage user access
To prevent a user from accessing the Merchant Portal, select Disable on the User Management page.
To reactivate a user, click Reset Password on the User Management page. The user receives an email with instructions to reactivate their account.
Updated 15 days ago