Configure Trimble ID Logins

For Trimble Construction One customers, learn how to configure your web portal so that users can log in using Trimble ID.

Note: If your company is still using Viewpoint ID, the following information does not apply to you.
To use Trimble ID, your organization must meet the following requirements:
  • You are a Trimble Construction One cloud customer
  • You are on Vista Web 25.2 or higher
  • You are on Vista 2024 R1 or higher
  • You have Trimble ID enabled in Vista. This requires flipping a switch on the Vista backend. Our migration team will complete this step.
  1. In Trimble Construction One, an Enterprise Administrator must enable the Keystyle tool. This is so that admins can set up non-Vista users (portal users who do not access Vista) with single sign-on access to the Vista Web portal. Enterprise Admins should complete the following:
    1. Open the Admin Center
    2. Select Modules > Settings, and enable the Keystyle tool.
      Tip: For instructions on activating modules in Trimble Construction One, see Activate or Deactivate Tools for the Enterprise in the Viewpoint Team Help.
    3. If you need to add non-Vista users, enter their email addresses and send them invitations to join your organization. They should receive an email invite and complete the steps to log in.

      These users will not access Vista, but they will be able to sign into the Vista Web portal with Trimble ID SSO.

  2. In Vista Web, a system administrator must configure portal settings to enable Trimble ID SSO logins:
    1. Select Admin > Portal Settings > Security / Login > Single Sign On.
    2. Select the checkbox for Enable SSO through TC1 login. This setting enables the Sign In with Trimble ID button on the login page.
    3. Optional: If you want to add a link to Trimble Construction One from your portal's navigation bar, select Admin > Portal Settings > Administration / Initial Setup > Advanced Configuration, and select the checkbox for Show TC1 Link On Nav.
    4. Optional: To make Trimble ID the only way users can log into the portal, go to Admin > Portal Settings > Security / Login, and select Windows Authentication Login.

      For the Log in mode setting, choose TID/VPID SSO Only.

      This will be the only login option available on your portal login page, and all users will log in this way.

      Important: Make sure you have Trimble ID fully enabled and all of your users can log in with it before you enable this TID/VPID SSO Only option. If you don't, you may lock some users out of your portal.
  3. In Vista, admins must add each user's email address to their Vista VA User Profile or PR Employee record in order for users to log in using Trimble ID. The email must be unique and cannot exist on another employee's record or in another PR company.
    1. For users with a VA User Profile record: Go to Viewpoint Administration > Programs > VA User Profile. Open the form for each user you want to set up, and make sure they have a username that is their email address. You also need to enter the user's payroll company (PR Co), and their Employee number.
      Note: A user should have only one VA User Profile.

      For more information about updating VA User Profile records, see Link PR Co and Employee Number to a VA User Profile.

    2. For users with a PR Employee record (non-VA users): Go to Payroll > Programs > PR Employee. Open the form for each user you want to set up, and enter the user's email address on their record.

      This is either the email address used previously for Viewpoint ID, or the email address they used to set up their Trimble ID.

  4. To set up multifactor authentication (MFA) for your users, a system admin must configure MFA in Vista VA Site Settings.

    For details, see Configure Multifactor Authentication and Additional Login Settings in the Vista Help.

  5. To unlink Trimble ID from a user's profile, see Unlink Trimble ID from a User's Portal Profile.
  6. To configure users to access Vista Web Office Tools, make sure they have the following:
    • A Trimble ID
    • One Vista VA User Profile, with an email address, PR Co number, and employee number entered on the form
    • Permissions to access forms in Vista

    For more information about accessing Office Tools, see License Users for Vista Web Office Tools.

Once you complete this configuration, your users will be able to log in to the portal using Trimble ID.

Information about Trimble ID logins:

  • Users who previously logged in using SSO through Viewpoint ID should enter their same email address to log in, and their account will automatically be upgraded to Trimble ID.

  • Users whose accounts are upgraded to Trimble ID cannot log in to the portal using their employee number.

  • Users can tell if their account upgraded and linked to Trimble ID after logging in by selecting their name in the top right of the portal and verifying that a flag says TID Linked.

  • If a user tries to log into the portal using Trimble ID but does not have their email address associated with their Vista VA User Profile or PR Employee records, the user will not be able to log in. Users should contact a system admin to add their email address to their record in Vista, as described above.

  • For existing Vista users new to SSO: Vista users who did not previously log in using Viewpoint ID SSO must log into Vista first before logging into the portal. This will prompt the migration of the user's Vista login to Trimble ID. At that point they can log into the Vista Web portal through Trimble ID with the email they use in Vista, and their accounts will automatically link.
  • Logging out of Vista Web logs a user out of their Trimble ID session.
    Note: The advanced portal setting Log out all tabs and windows if a user is logged out does not impact SSO logins. Regardless of whether or not this setting is enabled, a user's SSO session ends when they log out of the portal.