If a domain on CommCare HQ has the Connect feature flag enabled then additional admin controls become available on the “Mobile Workers” page. Specifically, an admin becomes able to manage linking and unlinking mobile worker PersonalID account links from the domain.

Below is a screenshot outlining the PersonalID specific controls mentioned above:

This column shows the link status of each mobile worker and can have one of three states: Active, Inactive, or Not Linked.
1. Active - The mobile worker has an active PersonalID account linked to the domain. This allows a mobile worker to log into the domain using their PersonalID credentials.
2. Inactive - The mobile worker has their PersonalID account linked to the domain, however it has been disabled. The mobile worker is therefore not able to log into the domain using their PersonalID credentials.
3. Not Linked - The mobile worker does not have a PersonalID account linked to the domain, and will need to be invited. Please refer to Unlinked Accounts for more details.
Allows an admin to mark an inactive PersonalID link as active. Please refer to Effects of Activating a PersonalID Link for more details.
Allows an admin to mark an active PersonalID link as inactive. Marking the link as inactive does not delete the link. Please refer to Effects of Deactivating a PersonalID Link for more details.

Deactivating a PersonalID Link

If you wish to no longer let a mobile worker have their PersonalID account be actively linked to the domain then you can simply unlink their account on the “Mobile Workers” page. Note that mobile workers will be able to re-request access to a given domain after this deactivation has occurred.

Effects of Deactivating a PersonalID Link

When an active PersonalID link for a mobile worker is unlinked the link simply gets deactivated. This has the following consequences:

The user is no longer able to log into the domain using their PersonalID credentials.
The password for the mobile worker can be reset or updated.

It is important to note that unlinking a mobile worker’s PersonalID link does not delete the link, but rather just deactivates it. This means that the link can be activated again by simply clicking on the “Link PersonalID” button for the mobile worker without needing to invite the mobile worker again.

How to Deactivate a PersonalID Link

To deactivate a currently linked mobile worker’s PersonalID account, simply click on the “Unlink PersonalID” button on the relevant mobile worker row:

Clicking this button will cause the following pop-up to appear:

After clicking “Unlink” in the pop-up, the PersonalID status for the mobile worker will now show as “Inactive”.

Activating a PersonalID Link

If you wish to re-activate a mobile worker’s PersonalID account link then you can do this on the “Mobile Workers” page.

Effects of Activating a PersonalID Link

When an inactive PersonalID link for a mobile worker is linked the link gets activated again. This has the following consequences:

The user is able to log into the domain using their PersonalID credentials.
The password for the mobile worker can no longer be reset or updated on CommCare HQ.

Below is a screenshot showing how the edit password page for a mobile worker is disabled when their link is active:

How to Activate a PersonalID Link

To activate a currently linked mobile worker’s PersonalID account, simply click on the “Link PersonalID” button on the relevant mobile worker row:

Clicking this button will cause the following pop-up to appear:

After clicking “Link” in the pop-up, the PersonalID status for the mobile worker will now show as “Active”.

Unlinked Accounts

If a mobile worker does not have a PersonalID link to the domain (either active or inactive) then their status will show as “Not Linked”. When a mobile worker has this status then the “Link PersonalID” and “Unlink PersonalID” buttons for that mobile worker will be hidden. This is because their link cannot be activated or deactivated until a link has been created.

To create a PersonalID link for the mobile worker they will need to be sent an invite first.