Configure Trimble ID Logins

For Trimble Construction One customers, learn how to configure your web portal so that users can log in using Trimble ID.

Note: If your company is still using Viewpoint ID, the following information does not apply to you.
To use Trimble ID, your organization must meet the following requirements:
  • You are a Trimble Construction One cloud customer
  • You are on Vista Web 25.2 or higher
  • You are on Vista 2024 R1 or higher
  • You have Trimble ID enabled in Vista. This requires flipping a switch on the Vista backend. Our migration team will complete this step.
  1. In Vista Web, a system administrator must configure portal settings to enable Trimble ID SSO logins. Go to Admin > Portal Settings > Security / Login.
    1. Expand the Single Sign On section, and select the checkbox for Enable SSO through TC1 login. This setting enables the Sign In with Trimble ID button on the login page.
    2. Optional: To make Trimble ID the only way users can log into the portal, expand the Windows Authentication Login section. For the Log in mode setting, choose TID/VPID SSO Only.

      This will be the only login option available on your portal login page, and all users will log in this way.

      Important: Make sure you have Trimble ID fully enabled and all of your users can log in with it before you enable this TID/VPID SSO Only option. If you don't, you may lock some users out of your portal.
    3. Optional: In the General Configuration section, configure the TID Notification Preferences setting. This setting allows you to choose the communication method used to notify users when connecting their Trimble ID account to their portal profile.
      Note: This setting only applies to users who do not have Trimble ID associated with a Vista VA username or PR Employee email.
      Choose between the following communication options:
      • E = Email only (setting default)
      • S = SMS only (through Twilio)
      • ES = Email if populated, SMS (through Twilio) secondary
      • SE = SMS if populated (through Twilio), email secondary
      Note: SMS will work only if you have a Twilio integration.
  2. Optional: If needed, admins can set up non-Vista users (portal users who do not access Vista) with single sign-on access to the Vista Web portal. In Trimble Construction One, Enterprise Admins should complete the following:
    1. Open the Admin Center.
    2. Select Modules > Settings, and enable the Keystyle tool.
      Tip: For instructions on activating modules in Trimble Construction One, see Activate or Deactivate Tools for the Enterprise in the Viewpoint Team Help.
    3. If you need to add non-Vista users, enter their email addresses and send them invitations to join your organization. They should receive an email invite and complete the steps to log in.

      These users will not access Vista, but they will be able to sign into the Vista Web portal with Trimble ID SSO.

  3. In Vista, admins must add each user's email address to their Vista VA User Profile or PR Employee record in order for users to log in using Trimble ID. The email must be unique and cannot exist on another employee's record or in another PR company.
    1. For users with a VA User Profile record: Go to Viewpoint Administration > Programs > VA User Profile. Open the form for each user you want to set up, and make sure they have a username that is their email address. You also need to enter the user's payroll company (PR Co), and their Employee number.
      Note: A user should have only one VA User Profile.

      For more information about updating VA User Profile records, see Create a VA User Profile for a Vista Web User.

    2. For users with a PR Employee record (non-VA users): Go to Payroll > Programs > PR Employee. Open the form for each user you want to set up, and enter the user's email address on their record.

      This is either the email address used previously for Viewpoint ID, or the email address they used to set up their Trimble ID.

  4. To set up multifactor authentication (MFA) for your users, a system admin must configure MFA in Vista VA Site Settings.

    For details, see Configure Multifactor Authentication and Additional Login Settings in the Vista Help.

  5. To unlink Trimble ID from a user's profile, see Unlink Trimble ID from a User's Portal Profile.
  6. To configure users to access Vista Web Office Tools, make sure they have the following:
    • A Trimble ID
    • One Vista VA User Profile, with an email address, PR Co number, and employee number entered on the form
    • Permissions to access forms in Vista

    For more information about accessing Office Tools, see License Users for Vista Web Office Tools.

Once you complete this configuration, your users will be able to log in to the portal using Trimble ID.

Information about Trimble ID logins:

  • Users who previously logged in using SSO through Viewpoint ID should enter their same email address to log in, and their account will automatically be upgraded to Trimble ID.

  • Users whose accounts are upgraded to Trimble ID cannot log in to the portal using their employee number.

  • Users can tell if their account upgraded and linked to Trimble ID after logging in by selecting their name in the top right of the portal and verifying that a flag says TID Linked.

  • If a user tries to log into the portal using Trimble ID but does not have their email address associated with their Vista VA User Profile or PR Employee records, the user will not be able to log in. Users should contact a system admin to add their email address to their record in Vista, as described above.

  • For existing Vista users new to SSO: Vista users who did not previously log in using Viewpoint ID SSO must log into Vista first before logging into the portal. This will prompt the migration of the user's Vista login to Trimble ID. At that point they can log into the Vista Web portal through Trimble ID with the email they use in Vista, and their accounts will automatically link.
  • Logging out of Vista Web logs a user out of their Trimble ID session.
    Note: The advanced portal setting Log out all tabs and windows if a user is logged out does not impact SSO logins. Regardless of whether or not this setting is enabled, a user's SSO session ends when they log out of the portal.