Configure Trimble ID Native User Logins

Native Trimble ID users have credentials managed through Trimble ID (not through the Vista Web portal) and have a company email address. Set up your web portal and configure your users so they can sign in using native Trimble ID credentials.

You must be a System Admin in order to complete these steps.
To use Trimble ID, your organization must meet the following requirements:
  • You are a Trimble Construction One cloud customer
  • You are on a compatible Vista Web version:
    • For native Trimble ID users: Vista Web 25.2 or higher
    • For managed Trimble ID users: Vista Web 25.8.434 or higher
  • You are on Vista 2024 R1 or higher
  • You have Trimble ID enabled in Vista. This requires flipping a switch on the Vista backend. Our migration team will complete this step.
Note: If your company is still using Viewpoint ID, the following information does not apply to you.

To configure native users:

  1. In Vista Web, a system administrator must configure portal settings to enable Trimble ID SSO logins. Go to Admin > Portal Settings > Security / Login.
    1. Expand the Single Sign On section, and select the checkbox for Enable SSO through TC1 login. This setting enables the Sign In with Trimble ID option on the login page.
    2. Optional: To make Trimble ID the only way users can log into the portal, expand the Windows Authentication Login section. For the Log in mode setting, choose TID/VPID SSO Only.

      This will be the only login option available on your portal login page, and all users will log in this way.

      Important: Make sure you have Trimble ID fully enabled and all of your users can log in with it before you enable this TID/VPID SSO Only option. If you don't, you may lock some users out of your portal.
  2. In Vista, admins must add each user's email address to their Vista VA User Profile or PR Employee record in order for users to log in using native Trimble ID credentials. The email must be unique and cannot exist on another employee's record or in another PR company.
    1. For users with a VA User Profile record: Go to Viewpoint Administration > Programs > VA User Profile. Open the form for each user you want to set up, and make sure they have a User Name that is their email address. You also need to enter the user's payroll company (PR Co), and their Employee number.

      The user is linked to Trimble ID through the username on this form, which is either the email address used previously for Viewpoint ID, or the email address the user entered when first creating their Trimble ID.

      Note: Most users who previously signed in with Viewpoint ID and have a VA User Profile already meet these requirements. In most cases, you won't have to do anything for these VA users.

      Note: A user should have only one VA User Profile.

      For more information about updating VA User Profile records, see Create a VA User Profile for a Vista Web User.

    2. For users with a PR Employee record (non-VA users): Go to Payroll > Programs > PR Employee. Open the form for each user you want to set up, and enter the user's email address on their record.

      The user is linked to Trimble ID through the Email Address on this form, which is either the email address used previously for Viewpoint ID, or the email address the user entered when first creating their Trimble ID.

  3. To set up multifactor authentication (MFA) for your users, a system admin must configure MFA in Vista VA Site Settings.

    For details, see Configure Multifactor Authentication and Additional Login Settings in the Vista Help.

  4. Instruct your users to log into the portal using Trimble ID: Create a Trimble ID to Sign in to Vista Web

Once you complete this configuration, your users will be able to log in to the portal using Trimble ID.

Information about Trimble ID logins:

  • Users who previously logged in using SSO through Viewpoint ID should enter their same email address to log in, and their account will automatically be upgraded to Trimble ID.

  • Users whose accounts are upgraded to Trimble ID cannot log in to the portal using their employee number.

  • Users can tell if their account upgraded and linked to Trimble ID after logging in by selecting their name in the top right of the portal and verifying that a flag says TID Linked.

  • If a user tries to log into the portal using Trimble ID but does not have their email address associated with their Vista VA User Profile or PR Employee records, the user will not be able to log in. Users should contact a system admin to add their email address to their record in Vista, as described above.

  • Logging out of Vista Web logs a user out of their Trimble ID session.
    Note: The advanced portal setting Log out all tabs and windows if a user is logged out does not impact SSO logins. Regardless of whether or not this setting is enabled, a user's SSO session ends when they log out of the portal.