Managing User Profiles in the Marqeta Dashboard

With User Profile Management, you can manage access to the Marqeta Dashboard. Depending on your permissions and access levels, the following tasks can be performed in User Profile Management:

• View user information
• Add users
• Resend an invitation
• Edit a user’s information
• Enable and disable users
• Manage multi-factor authentication
• Enable single sign-on authentication

​

Viewing user information

To view user information, go to Control center > User profiles. The Users tab lists current users along with the following information: To view additional information, including permissions and access levels, select the user row to display the User profile popup window. For more information on user permissions, see Permissions.

​

Filtering by column

To filter rows by column, enter the sequence of letters you want to filter on in the text box at the top of the column. As you type, the matching rows are filtered dynamically.

​

Adding users

To add a user:

​

Permissions

The following table shows the Marqeta Dashboard permissions and available access levels for each. For details on the specific access that each permission provides, see Access level details.

​

Access level details

The following table shows the specific access in the dashboard granted for each permission and access level:

​

Resending an invitation

To resend an invitation:

​

Editing user information

To edit a user’s information:

​

Enabling and disabling users

To enable or disable a user:

​

Managing multi-factor authentication

Multi-factor authentication (MFA) is an authentication method that requires the user to provide two or more verification factors to gain access. Marqeta Dashboard requires users to have MFA enabled via SMS or Google’s Time-based One Time Password (TOTP) authenticator. To reset or manage a user’s MFA options, you must have the View and Edit access level for the User Profiles privilege.

​

Resetting multi-factor authentication

You should reset the user’s MFA when a user:

• Changes their phone number and needs to authenticate using a new phone number using SMS.
• Changes their mobile device and needs to authenticate using a new device with Google authenticator.
• Deletes their Google authenticator code and needs to rescan the QR code using the same device.

If SMS is chosen, resetting MFA clears the phone number and allows a new phone number to be entered for the user. If Google authenticator is chosen, resetting MFA redisplays the QR code. If the user had SMS MFA enabled and you’ve reset their MFA, the user is prompted to enter a new phone number when they sign in. If the user had Google Authenticator MFA enabled and you’ve reset their MFA, the QR code is displayed again for the user to scan. To reset a user’s MFA:

​

Switching a user’s MFA option

A user’s MFA option can be switched between SMS and Google Authenticator. Switch a user’s MFA option when the user:

• Is not receiving SMS messages and would like to switch to Google Authenticator.
• Is an international user who doesn’t use a US phone number and has trouble receiving SMS.
• Would like to switch from SMS to Google Authenticator or switch from Google Authenticator to SMS.

To switch a user’s MFA option: If the user had Google Authenticator enabled and has switched to SMS, the user will be prompted to enter a phone number when they sign in. If the user had SMS authentication enabled and has switched to Google Authenticator, the QR code will be displayed for the user to scan.

​

Accessing the Dashboard using MFA

To access the Marqeta Dashboard, go to app.marqeta.com in your browser. If your organization has implemented multi-factor authentication (MFA), you are required to confirm your identity using either SMS or email when you log in. For SMS, you will need to enter the six-digit code that you receive on your phone into the login window. For Google Authenticator, you will need to follow the Google Authenticator process.

​

Resetting your MFA access

In some cases, your MFA access may need to be reset—for example, if your device has been lost or stolen. In that case, contact your system administrator to reset your MFA access.

​

Resetting MFA for SMS

If you have SMS MFA enabled and have requested a reset:

​

Resetting MFA for Google Authenticator

If you have Google Authenticator MFA enabled and have requested a reset:

​

Switching your multi-factor authentication option

If you want to switch your MFA option, send a request to your system administrator. You will be prompted to register using either the SMS or Google Authenticator procedure described above.

​

Enabling single sign-on authentication

Single sign-on (SSO) is an authentication method that allows users to log in to multiple applications with one set of credentials. SSO reduces security overhead for system administrators by allowing users to delegate authentication to their external Security Assertion Markup Language 2.0 (SAML 2.0) Identity Provider (IdP) and eliminating the need for users to maintain a separate password to log in to Marqeta Dashboard. When you enable SSO, SSO becomes the exclusive method for your users to log in to Marqeta Dashboard. SSO implementation is based on email domain, so after your email domain is onboarded to SSO, your new and existing users will be automatically provisioned for SSO. You will follow the existing process to add a user in Marqeta Dashboard. Your users will then access Marqeta Dashboard using SSO. If you are a system administrator and prefer your users use SSO, contact your Marqeta representative. Note that email aliases are not valid for SSO with Marqeta Dashboard. Users who use email aliases to access Marqeta Dashboard will lose access after SSO is enabled, so consult with your Marqeta representative if your organization includes such users.

​

Setting up single sign-on authentication

To set up SAML 2.0 authentication in Marqeta Dashboard:

​

Accessing the Dashboard using SSO

This section describes how users can access the Marqeta Dashboard using single sign-on (SSO) authentication. To access the Marqeta Dashboard, go to app.marqeta.com in your browser. If your organization has implemented single sign-on (SSO) authentication, you are required to log in using SSO. You will be redirected from Marqeta Dashboard to your SSO login page to enter your credentials and authenticate. After successfully authenticating, you will be redirected back to Marqeta Dashboard. Note that email aliases are not valid for SSO with Marqeta Dashboard.