eTrustPortal — Super Admin

Organizations

Manage all tenant accounts

Organizations

—

Active tenants

Total Users

—

Staff + clients

Clients

—

Across all orgs

Documents

—

Files stored

Storage

—

Total data

All Organizations

Super Admin Users

Manage who has access to this console

Console Users

Role Permissions

Owner
Full access · manage all users · delete orgs · see everything

Admin
Create/edit orgs & users · impersonate · cannot delete orgs or manage SA users

Viewer
Read-only access to all orgs and stats. No changes permitted.

Platform Settings

Configure API keys, integrations, and platform-wide options

🤖 AI Document Classification (ChatGPT) 🔤 Keyword Mode

When set, document uploads can use GPT-4o-mini to auto-classify files into categories (tax, invoice, contract, etc.). If blank, the built-in keyword engine is used instead. Get a key at platform.openai.com/api-keys.

OpenAI API Key

🔐 Security Settings

JWT Secret

Used to sign login tokens. Changing this logs out all users.

Encryption Key (hex)

AES-256 key for message encryption. Must be 64 hex chars.

📁 File Storage

Upload Directory Relative path where uploaded files are stored.

Max File Size (MB)

🌐 Server

Base URL Used in email links and notifications.

Port

🏦 Vault Encryption (HashiCorp Vault)

Optional enterprise-grade envelope encryption. Leave VAULT_ENABLED=false for dev/test. When enabled, all sensitive fields are encrypted via HashiCorp Vault Transit.

Vault Enabled

Vault Address

Vault Role ID

Vault Secret ID

🔍 Live Vault Status

Click Refresh to load live Vault status…

⚠️ Server will restart automatically after saving to apply changes.

🔐 SSO & Directory Authentication

Configure SAML 2.0 and LDAP/Active Directory single sign-on per tenant

Select Tenant

Tenant

No tenant selected

⚡ SAML 2.0 Configuration

Enable SAML SSO

Identity Provider (IdP) Preset

Identity Provider Settings

IdP Entity ID / Issuer

IdP SSO URL (HTTP-POST or Redirect)

IdP Single Logout URL (optional)

IdP Signing Certificate (PEM — paste the X.509 certificate)

Service Provider (eTrustPortal) Settings

SP Entity ID

Leave blank to use the default metadata URL as entity ID

ACS URL (Assertion Consumer Service)

Leave blank to use auto-generated callback URL

SP Metadata URL (give this to your IdP administrator)

Select a tenant above to generate metadata URL View XML

Attribute Mapping

Map IdP attribute names to eTrustPortal user fields. Use the exact attribute name from your IdP.

Email attribute

First Name attribute

Last Name attribute

Role/Group attribute

Provisioning & Access

JIT Provisioning

Default Role (for provisioned users)

Allow users to also log in with local password (fallback)

My Account

Manage your profile, password and two-factor authentication

👤 Profile

First Name

Last Name

Role

🔑 Change Password

Current Password

New Password

Confirm New

Organizations

Super Admin Users

Platform Settings

🤖 AI Document Classification (ChatGPT) 🔤 Keyword Mode

🔐 Security Settings

📁 File Storage

🌐 Server

🏦 Vault Encryption (HashiCorp Vault)

🔍 Live Vault Status

🔐 SSO & Directory Authentication

Select Tenant

⚡ SAML 2.0 Configuration

Identity Provider Settings

Service Provider (eTrustPortal) Settings

Attribute Mapping

Provisioning & Access

🗂️ LDAP / Active Directory Configuration

Server Connection

User Search

Attribute Mapping

Group → Role Mapping

Provisioning & Access

👥 SSO-Provisioned Users

My Account

👤 Profile

🔑 Change Password

🔐 Two-Factor Authentication